CVE-2026-60498

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in JD Edwards EnterpriseOne Human Resources Management (version 9.2) in Human Resources component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.

Risk Assessment

Risk of full system takeover, potentially exposing employee data and disrupting HR processes.

Recommendation

Apply Oracle patches and restrict JDENET access to trusted networks.

Other vulnerabilities in JD Edwards EnterpriseOne Human Resources Management

CVE-2026-60493High
Vulnerability in JD Edwards EnterpriseOne Human Resources Management (Human Resources component) allows a low-privileged attacker to take over the system over the network via HTTP. Version 9.2 is affected.

Original NVD description (English source)

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Human Resources Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).