Installation Security Vulnerability in JD Edwards EnterpriseOne Tools by Oracle
CVE-2026-91330

3.3LOW

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91330?

A vulnerability exists in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards, allowing low-privileged attackers with access to the infrastructure to compromise the tools. This exploitation could lead to unauthorized operations affecting service availability, particularly causing a partial denial of service. The vulnerability impacts supported versions from 9.2.0.0 up to 9.2.26.5 and represents a significant security concern for organizations relying on this platform.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.