Vulnerability in Oracle JD Edwards EnterpriseOne Tools Affects Monitoring and Diagnostics SEC
CVE-2026-91301

3.6LOW

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91301?

This vulnerability in JD Edwards EnterpriseOne Tools can be exploited by low-privileged attackers who have logged onto the infrastructure where the product operates. They may gain unauthorized access to modify, insert, or delete data accessible by JD Edwards EnterpriseOne Tools. Additionally, this vulnerability may allow attackers to cause a partial denial of service, impacting the availability of the application. The affected versions range from 9.2.0.0 to 9.2.26.5, making it crucial for users to evaluate their current security posture against this risk.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.6
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.