Login Request a demo
JE
Product
JD Edwards Enterpriseone Tools
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wildRansomware-linked
170
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities170In the news0Timeline
Severity mix
Critical 33High 55Medium 68Low 5
Severity
All severities170Critical33High55Medium68Low5
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add JD Edwards Enterpriseone Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: before 9.2.5.0
CVE-2025-30740
6.5
0%
Apr 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.2
CVE-2025-21509
6.5
1%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2025-21508
6.5
1%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2022-21561
6.5
1%
Jul 19
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: through 9.2.6.3
CVE-2021-26272
6.5
2%
Jan 26
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
Affected: before 9.2.6.0
CVE-2021-26271
6.5
2%
Jan 26
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the…
Affected: before 9.2.6.0
CVE-2018-11056
6.5
2%
Aug 31
RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption…
Affected: 9.2
CVE-2018-2947
6.5
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2017-3517
6.5
1%
Apr 24
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC)
Affected: 9.2
CVE-2015-1793
6.5
58%
Jul 9
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during…
Affected: 9.1; 9.2
CVE-2017-15707
6.2
5%
Dec 1
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially…
Affected: 9.2
CVE-2026-21946
6.1
0%
Jan 20
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.26.0
CVE-2025-53060
6.1
0%
Oct 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.4
CVE-2025-53056
6.1
0%
Oct 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech)
Affected: 9.2.0.0 through 9.2.9.4
CVE-2025-30709
6.1
0%
Apr 15
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: 9.2.0.0 through 9.2.9.2
CVE-2025-21538
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.2
CVE-2025-21527
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC)
Affected: before 9.2.9.0
CVE-2025-21513
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2025-21512
6.1
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.9.0
CVE-2024-21150
6.1
0%
Jul 16
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.8.2
CVE-2023-22055
6.1
0%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: before 9.2.7.4
CVE-2022-21631
6.1
1%
Oct 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC)
Affected: through 9.2.6.4
CVE-2022-21630
6.1
1%
Oct 18
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC)
Affected: through 9.2.6.4
CVE-2022-21409
6.1
1%
Apr 19
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: before 9.2.6.3
CVE-2021-41184
6.1
41%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-41183
6.1
9%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-41182
6.1
39%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: through 9.2.6.3
CVE-2021-2375
6.1
1%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime)
Affected: 9.2.0.0 through 9.2.5.3
CVE-2020-27193
6.1
2%
Nov 12
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
Affected: before 9.2.6.0
CVE-2020-9281
6.1
4%
Mar 7
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted…
Affected: before 9.2.5.2
CVE-2018-3006
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2999
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2950
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2949
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2948
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2946
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2018-2945
6.1
2%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime)
Affected: 9.2
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 9.2
CVE-2018-2659
6.1
1%
Jan 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC)
Affected: 9.2
CVE-2018-2658
6.1
1%
Jan 18
Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC)
Affected: 9.2
CVE-2026-60626
6.0
0%
Jul 21
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)
Affected: 9.2.26.3
CVE-2021-4160
5.9
4%
Jan 28
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure
Affected: 9.2.6.3
CVE-2021-21409
5.9
5%
Mar 30
Possible request smuggling in HTTP/2 due missing validation of content-length
Affected: before 9.2.6.3
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: before 9.2.6.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: before 9.2.5.3
CVE-2018-11057
5.9
2%
Aug 31
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known…
Affected: 9.2
CVE-2021-31810
5.8
3%
Jul 13
An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1
Affected: before 9.2.6.1
CVE-2021-20227
5.5
1%
Mar 23
A flaw was found in SQLite's SELECT query functionality (src/select.c)
Affected: before 9.2.6.0
CVE-2018-11055
5.5
0%
Aug 31
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection')…
Affected: 9.2
Page 1 of 2 · 68 total
12