CVE Intelligence

Oracle Jd Edwards Enterpriseone Procurement And Subcontract Management vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Jd Edwards Enterpriseone Procurement And Subcontract Management: 1 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:jd_edwards_enterpriseone_procurement_and_subcontract_management

CVE-2026-60618 High · 8.8 CWE-306 Jul 21, 2026
Missing Authentication for Critical Function in Oracle Jd Edwards Enterpriseone Procurement And Subcontract Management
Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Procurement and Subcontract Management. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Procurement and Subcontract Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).