CVE-2026-46910
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk38th percentile — higher than 38% of all known CVEs
Summary
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards, affecting the Enterprise Infrastructure Security component. It allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools.
Risk Assessment
Successful attacks can lead to unauthorized access to critical data and complete access to all JD Edwards EnterpriseOne Tools accessible data, as well as causing a hang or frequent crashes (complete DOS) of the tools.
Recommendation
It is recommended to update to the latest version of JD Edwards EnterpriseOne Tools to minimize the risk associated with this vulnerability.
Original NVD description (English source)
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H).