中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-46879

Oracle Corporation / JD Edwards EnterpriseOne Tools

9.8 · CVSS 3.1Critical

Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-46883Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46882Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46881Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46880Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46878Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46875Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.1
  • CVE-2026-46872Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.0
  • CVE-2026-46861Oracle Corporation / MySQL NDB ClusterCVSS 9.6

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.