CVE-2026-46906

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.2

Description An issue exists in the Enterprise Infrastructure Security component of JD Edwards EnterpriseOne Tools. A low privileged attacker with network access via HTTP can compromise the system. This may lead to unauthorized access, creation, deletion, or modification of critical data or all data accessible by JD Edwards EnterpriseOne Tools. Additionally, the impact may extend to other products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.