CVE-2026-46893

Description

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise JD Edwards EnterpriseOne General Ledger. While the vulnerability is in JD Edwards EnterpriseOne General Ledger, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne General Ledger. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-46893 ↗
• www.oracle.com/security-alerts/cspujun2026.html ↗

Related CVEs

• CVE-2026-46899Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.6
• CVE-2026-46897Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.9
• CVE-2026-46896Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.1
• CVE-2026-46895Oracle Corporation / Oracle Enterprise Command Center FrameworkCVSS 9.9
• CVE-2026-46892Oracle Corporation / JD Edwards EnterpriseOne Human Resources ManagementCVSS 9.1
• CVE-2026-46890Oracle Corporation / Siebel Apps - MarketingCVSS 9.8
• CVE-2026-46889Oracle Corporation / Siebel Apps - MarketingCVSS 9.8
• CVE-2026-46887Oracle Corporation / Siebel Apps - MarketingCVSS 9.8