High WID-SEC-2026-2896 6 CVEs

Oracle JD Edwards: Mehrere Schwachstellen

Published Aug 18, 2026 · Updated Aug 18, 2026 · de-DE

Vendor: Oracle Product: JD Edwards Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle JD Edwards ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Komponenten der Oracle JDEdwards sind vollständig integrierte und komplette Lösungen geschäftlicher Anwendungen (ERP) für Unternehmen.

Vulnerabilities 6

Critical 9.8

CVE-2026-61272

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte…

Oracle JD Edwards EnterpriseOne Tools

Aug 18, 2026
High 8.8

CVE-2026-61273

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Su…

Oracle JD Edwards EnterpriseOne Tools

Aug 18, 2026
High 8.1

CVE-2026-61265

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator…

Oracle JD Edwards EnterpriseOne Orchestrator

Aug 18, 2026
High 8.1

CVE-2026-61268

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).…

Oracle JD Edwards EnterpriseOne Tools

Aug 18, 2026
High 8.1

CVE-2026-61270

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator…

Oracle JD Edwards EnterpriseOne Orchestrator

Aug 18, 2026
High 7.5

CVE-2026-60956

Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll). The support…

Oracle JD Edwards EnterpriseOne US Payroll

Aug 18, 2026

Revision history

2026-08-18 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - August 2026 - Appendix Oracle JD Edwards vom 2026-08-18
https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixJDE