Known vulnerabilities in JD Edwards EnterpriseOne Tools

Vendor: Oracle
Software: JD Edwards EnterpriseOne Tools
Software CPE: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 147
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Tools is affected by 147 known vulnerabilities: 2 critical, 33 high, 85 medium, 27 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149673 - Improper input validation
CVE-2026-46909		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149674 - Improper input validation
CVE-2026-46905		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149675 - Improper input validation
CVE-2026-46878		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149676 - Improper input validation
CVE-2026-46879		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149677 - Improper input validation
CVE-2026-46880		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149678 - Improper input validation
CVE-2026-46881		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149679 - Improper input validation
CVE-2026-46882		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149680 - Improper input validation
CVE-2026-46883		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149681 - Improper input validation
CVE-2026-46904		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149683 - Improper input validation
CVE-2026-46906		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149684 - Improper input validation
CVE-2026-46912		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149685 - Improper input validation
CVE-2026-46913		 CWE-20 Low
No
No
 - 14.09.2026 SB2026091477
#VU149687 - Improper input validation
CVE-2026-46910		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU149688 - Improper input validation
CVE-2026-46903		 CWE-20 High
No
No
 - 14.09.2026 SB2026091477
#VU121709 - Improper input validation
CVE-2025-26333		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120100
SB20260120113
SB20260120120
and 7 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU13059 - Deserialization of Untrusted Data
CVE-2018-8013		 CWE-502 Low
No
No
 - 30.05.2018 SB2018053011
SB2018060503
SB2019011705
and 16 more


Showing elements 1 - 20 out of 147