As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0446 Vulnerabilities fixed in Oracle JD Edwards EnterpriseOne
Oracle patched multiple vulnerabilities in JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5 that allow attackers to gain unauthorized access via HTTP, HTTPS, and SMTP without authentication or with low privileges. Exploitation can result in data creation, modification, deletion, and potential complete system compromise, with some flaws requiring user interaction and others not. The vulnerabilities affect confidentiality, integrity, and availability of the system and its data.
Why it matters: Organizations running JD Edwards EnterpriseOne Tools should apply Oracle's patches immediately, as unauthenticated or low-privilege attackers can access and manipulate critical business data or take over the system.
- Source published
- First seen by Cybersecurity Tracker