Installation Security Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2026-91329

6.5MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91329?

A vulnerability has been identified in JD Edwards EnterpriseOne Tools, allowing an unauthenticated attacker with access to the execution infrastructure to exploit the system. Successful exploitation can result in unauthorized access to critical data, including the ability to create, delete, or modify data, as well as causing potential system crashes or downtime. Exploits require human interaction from a third party, highlighting the need for users to remain vigilant against social engineering tactics. Organizations using affected versions should implement necessary patches and security measures to safeguard sensitive information.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.