Catálogo de CVE
CVE-2026-46905
Vulnerability in the JD Edwards EnterpriseOne Tools…
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- Gravedad
- Critical · CVSS 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.48% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | jd_edwards_enterpriseone_tools | Not reported | UnknownSource applicability is not established | Provider not reported |
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | jd_edwards_enterpriseone_tools | Not reported | UnknownSource applicability is not established | Provider not reported |
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "jd_edwards_enterpriseone_tools",
"fixed_version": "",
"applicability_unknown": true
},
{
"name": "jd_edwards_enterpriseone_tools",
"ranges": [
{
"fixed": "",
"introduced": "9.2.0.0",
"last_affected": "9.2.26.2",
"start_excluding": ""
}
],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46905",
"fixed_version": "",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-46905",
"provider_updated_at": "2026-10-25T23:10:00.167"
}
]
}OpenFactory catalog packages
La asociación de paquetes está en curso.
Observado: