Installation Security Vulnerability in Oracle JD Edwards EnterpriseOne Tools
CVE-2026-91303

8.8HIGH

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91303?

The JD Edwards EnterpriseOne Tools product from Oracle is susceptible to an installation security vulnerability that allows unauthenticated attackers with network access via HTTP to compromise the system. The exploitation of this vulnerability requires an individual other than the attacker to interact with the system, enabling potential unauthorized takeover of the application. This vulnerability underscores the importance of robust security protocols to mitigate risks associated with unauthorized access and system integrity.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.