PT-2026-50018 · Oracle · Jd Edwards Enterpriseone Project Costing

CVE-2026-46911

·

Published

2026-06-16

·

Updated

2026-06-18

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Project Costing version 9.2
Description An issue exists in the Job Costing component of Oracle JD Edwards EnterpriseOne Project Costing. A low-privileged attacker with network access via JDENET can compromise the system. Although the flaw is located within the Project Costing product, successful exploitation may significantly impact additional products. This can lead to unauthorized access, creation, deletion, or modification of critical data or all data accessible to JD Edwards EnterpriseOne Project Costing.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09477
CVE-2026-46911

Affected Products

Jd Edwards Enterpriseone Project Costing