Vulnerability in JD Edwards EnterpriseOne Tools of Oracle
CVE-2026-91383

6.6MEDIUM

Key Information:

Vendor

Oracle
Status
Jd Edwards Enterpriseone Tools
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91383?

A vulnerability exists in JD Edwards EnterpriseOne Tools that could allow a high privileged attacker with network access via HTTP to compromise the system. It affects multiple increasingly greater versions, allowing attackers potential unauthorized access to sensitive data, including the ability to update, insert, or delete data. The vulnerability can thereby significantly impact the overall data integrity across connected applications, underscoring the need for prompt action to secure the environment. Organizations using any version of JD Edwards EnterpriseOne Tools from 9.2.0.0 to 9.2.26.5 should be particularly cautious.

Affected Version(s)

JD Edwards EnterpriseOne Tools 9.2.0.0 <= 9.2.26.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.