Vulnerabilities

TI-2026-77374 CVE-2026-91315 · GHSA-x578-788g-7vvp

Improper access control in Oracle JD Edwards EnterpriseOne Tools

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0017 Published 2026-10-20 No fix listed CWE-284

TI-2026-77373 CVE-2026-91314 · GHSA-mjpw-fmr5-7gp3

Improper access control in Oracle JD Edwards EnterpriseOne Tools

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00136 Published 2026-10-20 No fix listed CWE-284

TI-2026-77372 CVE-2026-91313 · GHSA-j6v4-28c4-jjv6

Missing authentication in Oracle JD Edwards EnterpriseOne Tools

LOW 37

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00366 Published 2026-10-20 No fix listed CWE-306

TI-2026-77371 CVE-2026-91312 · GHSA-p7ww-46g3-5hwv

JD Edwards EnterpriseOne Tools Installation Security Improper Access Control

LOW 28

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00148 Published 2026-10-20 No fix listed CWE-284

TI-2026-77370 CVE-2026-91311 · GHSA-p5fp-jxxx-4pg2

Improper privilege management in Oracle JD Edwards EnterpriseOne Tools

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0015 Published 2026-10-20 No fix listed CWE-269

TI-2026-77369 CVE-2026-91310 · GHSA-mgwr-4mcj-8jh7

Missing authentication in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 40

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-20 No fix listed CWE-306

TI-2026-77368 CVE-2026-91309 · GHSA-mc8f-x7rw-fwvx

Sensitive information exposure in Oracle JD Edwards EnterpriseOne Tools

LOW 26

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00334 Published 2026-10-20 No fix listed CWE-200

TI-2026-77367 CVE-2026-91308 · GHSA-7668-jm3c-c8f2

Sensitive information exposure in Oracle JD Edwards EnterpriseOne Tools

LOW 39

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2026-10-20 No fix listed CWE-200

TI-2026-77366 CVE-2026-91307 · GHSA-855q-7m52-wcq6

Sensitive data exposure in Oracle JD Edwards EnterpriseOne Tools

LOW 39

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2026-10-20 No fix listed CWE-200

TI-2026-77365 CVE-2026-91306 · GHSA-56vg-9pmh-397q

Privilege management flaw in Oracle JD Edwards EnterpriseOne Tools

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00119 Published 2026-10-20 No fix listed CWE-269

TI-2026-77364 CVE-2026-91305 · GHSA-p8x5-qc82-49pv

Authentication flaw in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 48

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00441 Published 2026-10-20 No fix listed CWE-287

TI-2026-77363 CVE-2026-91304 · GHSA-263r-5pmc-qxxp

Improper access control in Oracle JD Edwards EnterpriseOne Tools

LOW 35

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00136 Published 2026-10-20 No fix listed CWE-284

TI-2026-77362 CVE-2026-91303 · GHSA-8rw6-qrw7-w88g

Improper access control in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 40

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00285 Published 2026-10-20 No fix listed CWE-284

TI-2026-77361 CVE-2026-91302 · GHSA-6r9w-2567-36r9

Resource release flaw in Oracle JD Edwards EnterpriseOne Tools

LOW 15

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00153 Published 2026-10-20 No fix listed CWE-404

TI-2026-77360 CVE-2026-91301 · GHSA-7499-m5p8-2fg2

EnterpriseOne Tools Improper Access Control in Monitoring and Diagnostics SEC

LOW 16

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00109 Published 2026-10-20 No fix listed CWE-284

TI-2026-77359 CVE-2026-91300 · GHSA-f745-5h6r-rxfw

Cross-site request forgery in Oracle JD Edwards EnterpriseOne Tools

LOW 14

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00113 Published 2026-10-20 No fix listed CWE-352

TI-2026-77357 CVE-2026-91298 · GHSA-2mch-2j6f-mwf6

Oracle JD Edwards EnterpriseOne Tools access control flaw in Web Runtime SEC

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00196 Published 2026-10-20 No fix listed CWE-284

TI-2026-77356 CVE-2026-91297 · GHSA-76vc-63vf-xf7w

Improper access control in Oracle JD Edwards EnterpriseOne Tools

LOW 27

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00231 Published 2026-10-20 No fix listed CWE-284

TI-2026-77355 CVE-2026-91296 · GHSA-46m4-hq26-m7w5

URL redirection flaw in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 40

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00381 Published 2026-10-20 No fix listed CWE-601

TI-2026-77354 CVE-2026-91295 · GHSA-wjfv-gr2f-qjfv

Missing authentication in Oracle JD Edwards EnterpriseOne Tools

MEDIUM 40

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-306

TI-2026-77353 CVE-2026-91294 · GHSA-2w53-53gm-r98f

Resource exhaustion in Oracle JD Edwards EnterpriseOne Tools

LOW 20

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00274 Published 2026-10-20 No fix listed CWE-400

TI-2026-77352 CVE-2026-91293 · GHSA-9p43-2w53-f5v3

Information exposure in Oracle JD Edwards EnterpriseOne Tools

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00254 Published 2026-10-20 No fix listed CWE-200

TI-2026-77350 CVE-2026-91291 · GHSA-9hhv-27cw-qc84

JD Edwards EnterpriseOne Tools access control flaw in Business Logic Infra SEC

LOW 16

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.0011 Published 2026-10-20 No fix listed CWE-284

TI-2026-77349 CVE-2026-91290 · GHSA-jcw4-pgh2-3hc3

Sensitive information exposure in Oracle JD Edwards EnterpriseOne Tools

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00161 Published 2026-10-20 No fix listed CWE-200

TI-2026-77348 CVE-2026-91289 · GHSA-jgpj-f9v2-vwmw

JD Edwards EnterpriseOne Tools Monitoring and Diagnostics SEC exposure

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC).

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00254 Published 2026-10-20 No fix listed CWE-200

Vulnerabilities

Filters