Installation Security Flaw in JD Edwards EnterpriseOne Tools from Oracle
CVE-2026-91315

7.8HIGH

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91315?

An installation security vulnerability exists in JD Edwards EnterpriseOne Tools, developed by Oracle. This issue affects supported versions from 9.2.0.0 up to and including 9.2.26.5. The vulnerability is characterized by the potential for an unauthenticated attacker with access to the execution environment of JD Edwards EnterpriseOne Tools to exploit it. The successful exploitation of this vulnerability demands human interaction from another user, enabling the attacker to compromise the integrity and control over the JD Edwards EnterpriseOne Tools. This could allow them to execute unauthorized actions within the software, leading to severe consequences for data confidentiality, integrity, and availability.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.