CVE-2026-60619

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

27th percentile - higher than 27% of all known CVEs

Summary

Vulnerability in JD Edwards EnterpriseOne HCM Foundation (version 9.2) in Time Accounting and HRM Base component. Difficult to exploit, low-privileged attacker via HTTP can take over the system.

Risk Assessment

Risk of full system takeover, potentially leading to personal data theft and disruption of HR processes.

Recommendation

Immediately apply Oracle patches and restrict HTTP access for low-privileged accounts.

Other vulnerabilities in JD Edwards EnterpriseOne HCM Foundation

CVE-2026-60492High
Vulnerability in JD Edwards EnterpriseOne HCM Foundation (OW HR PR Foundation component) version 9.2. A low-privileged attacker with network access via HTTP can cause a hang or frequent crash (DOS) and unauthorized read access to a subset of data.

Original NVD description (English source)

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting and HRM Base). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne HCM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne HCM Foundation. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS