Unauthenticated Access Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2026-91302

3.3LOW

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91302?

Oracle's JD Edwards EnterpriseOne Tools has a vulnerability that allows an unauthenticated attacker with access to the infrastructure to compromise the system. The vulnerability requires human interaction, making it easier to exploit in environments where users may inadvertently assist the attacker. Successful exploitation can lead to unauthorized access and potential partial denial of service for the JD Edwards system, affecting its availability and reliability.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.