Jd Edwards Enterpriseone Advanced Pricing Procurement
Monthly
Full product takeover of Oracle JD Edwards EnterpriseOne Advanced Pricing - Procurement (version 9.2) is possible via the proprietary JDENET network protocol, where a low-privileged, network-authenticated attacker can compromise confidentiality, integrity, and availability. Oracle rates this CVSS 3.1 7.5, tempered by high attack complexity (AC:H), meaning exploitation is not straightforward. There is no public exploit identified at time of analysis and it is not on CISA KEV; the fix ships in the Oracle Critical Patch Update of July 2026.
Full product takeover of Oracle JD Edwards EnterpriseOne Advanced Pricing - Procurement (version 9.2) is possible via the proprietary JDENET network protocol, where a low-privileged, network-authenticated attacker can compromise confidentiality, integrity, and availability. Oracle rates this CVSS 3.1 7.5, tempered by high attack complexity (AC:H), meaning exploitation is not straightforward. There is no public exploit identified at time of analysis and it is not on CISA KEV; the fix ships in the Oracle Critical Patch Update of July 2026.