---
id: CVE-2026-60346
title: >-
  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD
  Edwards (component: Interoperability Security)
summary: >-
  Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD
  Edwards (component: Interoperability Security).   The supported version that
  is affected is 9.2.26.3. Difficult to exploit vulnerability allows
  unauthenticated atta…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-284
published: '2026-07-21'
updated: '2026-07-27'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-60346'
references:
  - url: 'https://www.oracle.com/security-alerts/cpujul2026.html'
    label: secalert_us@oracle.com
tags:
  - nvd
epss: 0.0031
epssPercentile: 0.21233
ingestedAt: '2026-07-27T12:18:02.099Z'
---

## Overview

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security).   The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.