CVE-2026-60495

ÉLEVÉE 7.5CVE-2026-60495 · Published 21/07/2026 · updated 24/10/2026

En bref

CVE-2026-60495 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant jd edwards enterpriseone requirements planning (oracle).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.33%, plus élevée que 26.9% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
jd edwards enterpriseone requirements planning oracle	`= 9.2`	No fix yet

Description

Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Requirements Planning. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Requirements Planning. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

References

oracle.com/security-alerts/cpujul2026.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free