Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2026-91313

8.1HIGH

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91313?

A security flaw exists in the JD Edwards EnterpriseOne Tools product of Oracle that could permit an unauthenticated attacker with network access to exploit the system via HTTP. This vulnerability affects versions 9.2.0.0 to 9.2.26.4 and could lead to unauthorized takeover of the JD Edwards EnterpriseOne Tools, compromising the confidentiality, integrity, and availability of the system resources.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.