Installation Security Vulnerability in Oracle JD Edwards EnterpriseOne Tools
CVE-2026-91312

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91312?

A vulnerability exists in the Installation Security component of Oracle's JD Edwards EnterpriseOne Tools, affecting multiple versions. This vulnerability allows an attacker with low privileges and access to the JD Edwards EnterpriseOne environment to potentially compromise the system. Exploiting this vulnerability could lead to unauthorized access to sensitive data and systems managed by JD Edwards, significantly impacting data security. Oracle has advised users to apply the necessary patches as soon as possible to mitigate this risk.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.