Login Request a demo
JE
Product
JD Edwards Enterpriseone Tools
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities170In the news0Timeline
Severity mix
Critical 33High 55Medium 68Low 5
Severity
All severities170Critical33High55Medium68Low5
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add JD Edwards Enterpriseone Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21946
6.1
0%
Jan 20
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.26.0
CVE-2025-53060
6.1
0%
Oct 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.4
CVE-2025-53056
6.1
0%
Oct 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech)
Affected: 9.2.0.0 through 9.2.9.4
CVE-2025-30709
6.1
0%
Apr 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.2
CVE-2025-21538
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.2
CVE-2025-21527
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC)
Affected: before 9.2.9.0
CVE-2025-21513
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2025-21512
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2024-21150
6.1
0%
Jul 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.8.2
CVE-2023-22055
6.1
0%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.7.4
CVE-2022-21631
6.1
1%
Oct 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC)
Affected: through 9.2.6.4
CVE-2022-21630
6.1
1%
Oct 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: through 9.2.6.4
CVE-2022-21409
6.1
1%
Apr 19
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: before 9.2.6.3
CVE-2021-41184
6.1
41%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-41183
6.1
9%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-41182
6.1
39%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-2375
6.1
1%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: 9.2.0.0 through 9.2.5.3
CVE-2020-27193
6.1
2%
Nov 12
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
Affected: before 9.2.6.0
CVE-2020-9281
6.1
4%
Mar 7
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted…
Affected: before 9.2.5.2
CVE-2018-3006
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2999
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2950
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2949
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2948
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2946
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2945
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 9.2
CVE-2018-2659
6.1
1%
Jan 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC)
Affected: 9.2
CVE-2018-2658
6.1
1%
Jan 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC)
Affected: 9.2
CVE-2026-60626
6.0
0%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)
Affected: 9.2.26.3
CVE-2021-4160
5.9
4%
Jan 28
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure
Affected: 9.2.6.3
CVE-2021-21409
5.9
5%
Mar 30
Possible request smuggling in HTTP/2 due missing validation of content-length
Affected: before 9.2.6.3
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: before 9.2.6.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: before 9.2.5.3
CVE-2018-11057
5.9
2%
Aug 31
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known…
Affected: 9.2
CVE-2021-31810
5.8
3%
Jul 13
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1
Affected: before 9.2.6.1
CVE-2021-20227
5.5
1%
Mar 23
A flaw was found in SQLite's SELECT query functionality (src/select.c)
Affected: before 9.2.6.0
CVE-2018-11055
5.5
0%
Aug 31
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection')…
Affected: 9.2
CVE-2025-30760
5.4
0%
Jul 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.3
CVE-2025-21586
5.4
0%
Apr 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.2
CVE-2025-21507
5.4
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2024-21245
5.4
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC)
Affected: before 9.2.9.0
CVE-2023-21936
5.4
0%
Apr 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.7.3
CVE-2022-21629
5.4
1%
Oct 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: through 9.2.6.4
CVE-2021-37695
5.4
1%
Aug 13
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: before 9.2.6.0
CVE-2021-32809
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: before 9.2.6.0
CVE-2021-32808
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: through 9.2.6.0
CVE-2021-2373
5.4
1%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: 9.2.0.0 through 9.2.5.3
CVE-2025-21514
5.3
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2021-22939
5.3
15%
Aug 16
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an…
Affected: through 9.2.6.1
Page 3 of 4 · 170 total
1234