CVE-2026-46892

Description

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Human Resources Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all JD Edwards EnterpriseOne Human Resources Management accessible data as well as unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Human Resources Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-46892 ↗
• www.oracle.com/security-alerts/cspujun2026.html ↗

Related CVEs

• CVE-2026-46897Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.9
• CVE-2026-46896Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.1
• CVE-2026-46895Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.9
• CVE-2026-46893Oracle Corporation / JD Edwards EnterpriseOne General LedgerCVSS 9.9
• CVE-2026-46890Oracle Corporation / Siebel Apps - MarketingCVSS 9.8
• CVE-2026-46889Oracle Corporation / Siebel Apps - MarketingCVSS 9.8
• CVE-2026-46887Oracle Corporation / Siebel Apps - MarketingCVSS 9.8
• CVE-2026-46884Oracle Corporation / Siebel Apps - MarketingCVSS 9.8