CVE-2026-46913

Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. While the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-46913 ↗
• www.oracle.com/security-alerts/cspujun2026.html ↗

Related CVEs

• CVE-2026-46933Oracle Corporation / Oracle Applications ManagerCVSS 9.9
• CVE-2026-46930Oracle Corporation / Oracle In-Memory Cost Management for Discrete IndustriesCVSS 9.1
• CVE-2026-46919Oracle Corporation / Siebel CRM Cloud ApplicationsCVSS 9.8
• CVE-2026-46918Oracle Corporation / Oracle Process Manufacturing Product DevelopmentCVSS 9.9
• CVE-2026-46912Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.3
• CVE-2026-46911Oracle Corporation / JD Edwards EnterpriseOne Project CostingCVSS 9.6
• CVE-2026-46910Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.1
• CVE-2026-46909Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8