Vulnerabilities

TI-2026-43293 CVE-2026-60628 · GHSA-w4vj-5g48-4fjr

Improper access control in Oracle JD Edwards EnterpriseOne Tools

LOW 17

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1LOW 3.7 Adjacent network No auth User interaction EPSS 0.00226 Published 2026-07-21 No fix listed CWE-284

TI-2026-43292 CVE-2026-60627 · GHSA-g82v-g699-89m6

MEDIUM 43

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306

TI-2026-43291 CVE-2026-60626 · GHSA-58wc-rhpq-46c6

LOW 26

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00159 Published 2026-07-21 No fix listed CWE-284

TI-2026-43286 CVE-2026-60621 · GHSA-xr99-79r8-rjm6

LOW 37

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306

TI-2026-43047 CVE-2026-60347 · GHSA-pxhg-2qmv-xcg7

LOW 16

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security).

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00114 Published 2026-07-21 No fix listed CWE-284

TI-2026-43046 CVE-2026-60346 · GHSA-4wf5-gccf-9m3j

LOW 17

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0031 Published 2026-07-21 No fix listed CWE-284