CVE-2026-46913Oracle · Jd_edwards_enterpriseone_tools
Vulnerability data via NVD (ingested)
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. While the vulnerability is in JD Edwards EnterpriseOne Tools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-46913product:"Oracle Jd Edwards Enterpriseone Tools"http.html:"Jd Edwards Enterpriseone Tools"More intel sources (5)
vuln:CVE-2026-46913vulnerabilities.cve_id: CVE-2026-46913CVE-2026-46913CVE-2026-46913"CVE-2026-46913" exploit -site:nvd.nist.gov