High 1 exploited CVE WID-SEC-2026-2442 20 CVEs

Oracle JD Edwards: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Vendor: Oracle Product: JD Edwards Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle JD Edwards ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Komponenten der Oracle JDEdwards sind vollständig integrierte und komplette Lösungen geschäftlicher Anwendungen (ERP) für Unternehmen.

Vulnerabilities 20

High 8.3

CVE-2021-22555 Exploited Public exploit EPSS 79%

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Jul 7, 2021
KEV Oct 6, 2025
Critical 9.9

CVE-2026-60627

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Th…

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026
High 8.8

CVE-2026-60489

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). …

Oracle JD Edwards EnterpriseOne CRM Foundation

Jul 21, 2026
High 8.8

CVE-2026-60490

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). …

Oracle JD Edwards EnterpriseOne CRM Foundation

Jul 21, 2026
High 8.8

CVE-2026-60493

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human…

Oracle JD Edwards EnterpriseOne Human Resources Management

Jul 21, 2026
High 8.8

CVE-2026-60499

Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Adviso…

Oracle JD Edwards EnterpriseOne Solution Advisor

Jul 21, 2026
High 8.8

CVE-2026-60618

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (comp…

Oracle JD Edwards EnterpriseOne Procurement and Subcontract Management

Jul 21, 2026
High 8.1

CVE-2026-60621

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). The…

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026
High 7.5

CVE-2026-60495

Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requiremen…

Oracle JD Edwards EnterpriseOne Requirements Planning

Jul 21, 2026
High 7.5

CVE-2026-60496

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: A…

Oracle JD Edwards EnterpriseOne Advanced Pricing - Procurement

Jul 21, 2026
High 7.5

CVE-2026-60497

Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). …

Oracle JD Edwards EnterpriseOne CRM Foundation

Jul 21, 2026
High 7.5

CVE-2026-60498

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human…

Oracle JD Edwards EnterpriseOne Human Resources Management

Jul 21, 2026
High 7.5

CVE-2026-60619

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting a…

Oracle JD Edwards EnterpriseOne HCM Foundation

Jul 21, 2026
High 7.1

CVE-2026-60492

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Foundati…

Oracle JD Edwards EnterpriseOne HCM Foundation

Jul 21, 2026
High 7.0

CVE-2026-60494

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). T…

Oracle JD Edwards EnterpriseOne General Ledger

Jul 21, 2026
Medium 6.4

CVE-2026-60620

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Manag…

Oracle JD Edwards EnterpriseOne Configurator

Jul 21, 2026
Medium 6.0

CVE-2026-60626

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Th…

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026
Low 3.7

CVE-2026-60346

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security)…

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026
Low 3.7

CVE-2026-60628

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Th…

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026
Low 3.6

CVE-2026-60347

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure …

Oracle JD Edwards EnterpriseOne Tools

Jul 21, 2026

Revision history

2026-07-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle JD Edwards vom 2026-07-21
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixJDE