CVE-2026-87330
MediumCVSS 4.2Summary
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon can perform unauthorized modification, read data, and cause partial denial of service.
Risk Assessment
An attacker could alter or delete data and cause partial service disruptions, affecting integrity and availability.
Recommendation
Apply patches for JD Edwards EnterpriseOne Tools and restrict administrative privileges to the minimum necessary.
Other vulnerabilities in Oracle JD Edwards EnterpriseOne Tools
See all- CVE-2026-91384Medium
Vulnerability in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with JDENET network access can gain unauthorized access to critical data or all data accessible in the product.
- CVE-2026-87329Medium
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon can create, delete, or modify critical data, read a subset, and cause hang or repeatable crashes (complete DoS).
- CVE-2026-87328Medium
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with JDENET network access can gain unauthorized access to critical data.
- CVE-2026-87327Medium
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment can access and modify critical data.
- CVE-2026-87326Medium
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can gain unauthorized access to critical data.
- CVE-2026-87325Medium
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause hang or repeatable crashes (complete DoS), modify data, and read a subset.
Original NVD description (English source)
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data as well as unauthorized read access to a subset of JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS