CVE-2026-60494

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne General Ledger version 9.2

Description An issue in the E1 Foundation component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete Denial of Service (DOS) by causing the system to hang or crash repeatedly. Additionally, it may allow unauthorized read access to a subset of data, as well as unauthorized ability to update, insert, or delete certain accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.