Vulnerabilidades do Oracle Jd Edwards Enterpriseone Crm Foundation
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Jd Edwards Enterpriseone Crm Foundation: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:jd_edwards_enterpriseone_crm_foundation
CVE-2026-60497
Alta · 7.5
CWE-306 21/07/2026
Missing Authentication for Critical Function em Oracle Jd Edwards Enterpriseone Crm Foundation
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne CRM Foundation. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-60490
Alta · 8.8
CWE-284 21/07/2026
Improper Access Control em Oracle Jd Edwards Enterpriseone Crm Foundation
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne CRM Foundation. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-60489
Alta · 8.8
CWE-306 21/07/2026
Missing Authentication for Critical Function em Oracle Jd Edwards Enterpriseone Crm Foundation
Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne CRM Foundation. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).