CVE-2026-87331 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX) versions 9.2.0.0 through 9.2.26.5. It allows a high privileged attacker with logon access to the infrastructure where the tools execute to perform unauthorized update, insert, or delete operations on some accessible data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 3.4, indicating low severity with impacts on integrity and availability.
CVE-2026-87330 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX) affecting versions 9.2.0.0 through 9.2.26.5. It allows a high privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Successful exploitation can lead to unauthorized update, insert, or delete access to some accessible data, unauthorized read access to a subset of data, and the ability to cause a partial denial of service. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
A vulnerability in Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0 through 9.2.26.5) allows a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, unauthorized read access to some data, and the ability to cause denial of service by crashing the application. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating medium severity.
CVE-2026-87328 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via JDENET to potentially gain unauthorized access to critical data or all accessible data within the product. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.9, primarily impacting confidentiality. The vulnerability is difficult to exploit and does not affect integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update, providing patches for affected versions.
CVE-2026-87327 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the software to compromise the tools. Successful exploitation can lead to unauthorized access to critical data and unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 5.9, indicating medium severity.
CVE-2026-87326 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data or all accessible data within JD Edwards EnterpriseOne Tools. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.9, indicating a confidentiality impact without integrity or availability impact. Exploitation is considered difficult due to the high attack complexity. Oracle has released patches for this vulnerability as part of their October 2026 Critical Patch Update. Users are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2026-87325 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to cause denial of service by hanging or crashing the application, and to gain unauthorized read and write access to some accessible data. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-87324 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to cause denial of service by hanging or crashing the application, and to gain unauthorized read and write access to some accessible data. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-87323 is a vulnerability in Oracle's JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Successful exploitation can lead to unauthorized access to critical or all accessible data within JD Edwards EnterpriseOne Tools. The CVSS 3.1 base score is 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has released patches addressing this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-87322 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.20. It allows a high privileged attacker with access to the physical communication segment attached to the hardware running Oracle VM VirtualBox to compromise the virtualization software. Successful exploitation can lead to full takeover of Oracle VM VirtualBox and may impact additional products due to scope change. The vulnerability has a CVSS 3.1 base score of 8.4, indicating high confidentiality, integrity, and availability impacts.
CVE-2026-87321 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Package Build SEC) affecting versions 9.2.0.0 through 9.2.26.5. It requires a high privileged attacker with logon access to the infrastructure where the tools execute. Successful exploitation can lead to full compromise of JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-87320 is a vulnerability in Oracle's JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX) versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Exploitation is difficult and requires human interaction from a user other than the attacker. Successful exploitation can lead to full takeover of JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with high impacts on confidentiality, integrity, and availability.
CVE-2026-87319 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a medium severity level.
CVE-2026-87318 is a vulnerability in Oracle's JD Edwards EnterpriseOne Tools affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to potentially compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a medium severity level.
CVE-2026-87317 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via SMTP to perform unauthorized update, insert, or delete operations on accessible data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 4.8, indicating medium severity with impacts on integrity and availability.
CVE-2026-87316 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with logon access to the infrastructure where the tools execute to compromise the product. Successful exploitation can lead to full takeover of JD Edwards EnterpriseOne Tools. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability in their October 2026 Critical Patch Update.
CVE-2026-87315 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially enabling unauthorized creation, deletion, or modification of critical or accessible data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant integrity impact without confidentiality or availability loss. Oracle has released patches as part of its October 2026 Critical Patch Update to address this issue.
CVE-2026-87314 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC component) versions 9.2.0.0 through 9.2.26.5. It allows an unauthenticated attacker with network access via TLS to potentially compromise the product, leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant confidentiality and integrity impacts but no availability impact.
CVE-2026-87313 is a high-severity vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Interoperability SEC) affecting versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-87312 is a vulnerability in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. It allows a low privileged attacker with network access via JDENET to compromise the EnterpriseOne Tools component. The vulnerability is difficult to exploit but can lead to full takeover of the affected product. It has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability as part of its October 2026 Critical Patch Update.