CVE-2026-60346

LowCVSS 3.7

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 (component: Interoperability Security) has a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via JDENET to cause a partial denial of service (partial DOS).

Risk Assessment

An attacker can cause partial downtime of JD Edwards EnterpriseOne Tools, affecting ERP system availability.

Recommendation

Apply patches provided by Oracle for JD Edwards EnterpriseOne Tools version 9.2.26.3 or later.

Original NVD description (English source)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security). The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).