Authentication Vulnerability in Oracle JD Edwards EnterpriseOne Tools
CVE-2026-91327

7.5HIGH

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91327?

A significant vulnerability has been identified in the JD Edwards EnterpriseOne Tools from Oracle, specifically within the Installation Security component. Affected versions range from 9.2.0.0 to 9.2.26.5. This vulnerability is characterized by its difficulty to exploit, allowing unauthorized access to the tools by an attacker who can connect to the hardware running the software. If successfully exploited, it could lead to a full compromise of the JD Edwards EnterpriseOne Tools, posing serious threats to data integrity, confidentiality, and availability within the affected systems.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.