CVE-2026-87331: Infoleak
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of JD Edwards EnterpriseOne Tools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs high privileges and a logon to the infrastructure where JD Edwards EnterpriseOne Tools is running. The attack is local and does not require user interaction.
Which deployments are affected?
Affected supported versions are Oracle JD Edwards EnterpriseOne Tools 9.2.0.0 through 9.2.26.5, specifically the E1 Dev Platform Tech - UNIX component.
What could a successful attack do?
A successful attack can allow unauthorized update, insert, or delete access to some data accessible to JD Edwards EnterpriseOne Tools. It can also cause a partial denial of service affecting the product.