Live › vulnerability › CVE-2026-91292
Go to dashboardOracle JD Edwards EnterpriseOne Localizations 9.2 (LATAM component) has a flaw reachable over the network through JDENET. A low-privileged user can read a subset of accessible data and partly disrupt the service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running JD Edwards EnterpriseOne Localizations 9.2 with the LATAM component and JDENET network access enabled. Sites without this product or component, or without network exposure of JDENET to low-privileged users, are less exposed. The sources do not describe default configuration.
No product ranges from the sources yet.
9.2 with the LATAM component is deployed.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Localizations. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Localizations accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Localizations. CVSS 3.1 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-91292")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.