Vulnerabilities

TI-2026-77445 CVE-2026-91386 · GHSA-wmhx-4vpr-mx28

Oracle JD Edwards EnterpriseOne Orchestrator Improper Access Control Flaw

LOW 31

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.0015 Published 2026-10-20 No fix listed CWE-284

TI-2026-77358 CVE-2026-91299 · GHSA-hffg-22c9-m9ch

MEDIUM 49

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00494 Published 2026-10-20 No fix listed CWE-284

TI-2026-77344 CVE-2026-91285 · GHSA-mjrj-q96q-xfm3

LOW 29

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00337 Published 2026-10-20 No fix listed CWE-284

TI-2026-77336 CVE-2026-91277 · GHSA-rc46-f8x5-6p3x

LOW 30

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-10-20 No fix listed CWE-200

TI-2026-77335 CVE-2026-91276 · GHSA-m3m9-qf77-pjqq

LOW 24

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00231 Published 2026-10-20 No fix listed CWE-284