CVE-2026-87383: Infoleak
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle JD Edwards EnterpriseOne Tools is affected in supported versions 9.2.0.0 through 9.2.26.5. The affected component is Package Build SEC.
What access does an attacker need to exploit this issue?
An attacker needs high privileges and a logon to the infrastructure where JD Edwards EnterpriseOne Tools executes. The CVSS vector indicates local access, high privileges, low attack complexity, and no user interaction.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of JD Edwards EnterpriseOne Tools. Confidentiality, integrity, and availability can all be affected.