CVE-2026-60628

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3

Description An issue exists in the Installation Security component that allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to compromise the system. Exploitation is difficult and requires human interaction from a person other than the attacker. A successful attack can lead to unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to some accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.