CVE-2026-46893

critical · 9.9

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise JD Edwards EnterpriseOne General Ledger. While the vulnerability is in JD Edwards EnterpriseOne General Ledger, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne General Ledger. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

9.9

CVSS

0.3%

EPSS (exploit prob.)

23rd

EPSS percentile

2026-06-17

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-269

Affected products

Vendor	Product	Affected versions
oracle	jd_edwards_enterpriseone_general_ledger	9.2

Check a specific version with /api/v1/cve/match.

References

https://www.oracle.com/security-alerts/cspujun2026.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-46893