Login Request a demo
JE
Product
JD Edwards Enterpriseone Tools
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities170In the news0Timeline
Severity mix
Critical 33High 55Medium 68Low 5
Severity
All severities170Critical33High55Medium68Low5
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add JD Edwards Enterpriseone Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-42013
RansomwareIn wildKEV
9.8
100%
Oct 7
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
Affected: before 9.2.6.0
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: before 9.2.5.0
CVE-2026-60627
9.9
0%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)
Affected: 9.2.26.3
CVE-2026-61272
9.8
1%
Aug 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.26.4
CVE-2026-46909
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46905
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46904
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46883
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46882
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46881
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46880
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46879
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46878
9.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2025-21524
9.8
1%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC)
Affected: before 9.2.9.0
CVE-2021-3711
9.8
88%
Aug 24
SM2 Decryption Buffer Overflow
Affected: before 9.2.6.3
CVE-2020-2733
9.8
19%
Apr 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics)
Affected: 9.2
CVE-2020-9546
9.8
5%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.4.2
CVE-2020-9547
9.8
18%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.4.2
CVE-2020-9548
9.8
19%
Mar 2
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka…
Affected: before 9.2.4.2
CVE-2019-20330
9.8
9%
Jan 3
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking
Affected: before 9.2.4.2
CVE-2019-17195
9.8
11%
Oct 15
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or…
Affected: through 9.2.5.3
CVE-2019-17531
9.8
5%
Oct 12
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 9.2
CVE-2019-16943
9.8
5%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 9.2
CVE-2019-16942
9.8
6%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 9.2
CVE-2019-14379
9.8
8%
Jul 29
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of…
Affected: 9.2
CVE-2018-14718
9.8
13%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic…
Affected: 9.2
CVE-2018-11058
9.8
4%
Sep 14
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain…
Affected: 9.2
CVE-2018-8013
9.8
19%
May 24
In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the…
Affected: 9.2
CVE-2017-15095
9.8
8%
Feb 6
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending…
Affected: 9.2
CVE-2017-5645
9.8
89%
Apr 17
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary…
Affected: 4.0.1.0; 9.2
CVE-2026-46906
9.6
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46913
9.3
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46912
9.3
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-46910
9.1
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2026-61273
8.8
0%
Aug 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)
Affected: 9.2.0.0 through 9.2.26.4
CVE-2026-46903
8.8
0%
Jun 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infrastructure Security)
Affected: 9.2.0.0 through 9.2.26.2
CVE-2025-21515
8.8
1%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2020-11113
8.8
6%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka…
Affected: before 9.2.4.2
CVE-2020-11112
8.8
4%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.4.2
CVE-2020-11111
8.8
4%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms,…
Affected: before 9.2.4.2
CVE-2020-10969
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane
Affected: before 9.2.4.2
CVE-2020-10968
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider…
Affected: before 9.2.4.2
CVE-2020-10673
8.8
8%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka…
Affected: before 9.2.4.2
CVE-2020-10672
8.8
3%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.4.2
CVE-2022-21464
8.2
2%
Apr 19
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC)
Affected: 9.2.0.0 through 9.2.6.3
CVE-2026-61268
8.1
0%
Aug 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC)
Affected: 9.2.0.0 through 9.2.26.4
CVE-2026-60621
8.1
0%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security)
Affected: 9.2.26.3
CVE-2020-36182
8.1
4%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.5.3
CVE-2020-36180
8.1
4%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.5.3
CVE-2020-36179
8.1
17%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: before 9.2.5.3
Page 1 of 4 · 170 total
12…4