CVE-2026-60496

The record

Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Advanced Pricing - Procurement. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Advanced Pricing - Procurement. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected packages

Related vulnerabilities

• CVE-2026-121736 NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the… CWE-306
• CVE-2022-29966 Emerson Ovation has several protocols that have no authentication, which could allow an… CWE-306
• CVE-2026-63482 Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics… CWE-306
• CVE-2026-121557 WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that… CWE-306
• CVE-2026-121555 Foxel through 2.4.0 contains a missing authentication vulnerability that allows… CWE-306
• CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in… CWE-306
• CVE-2026-119740 Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated… CWE-306
• CVE-2026-119731 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its… CWE-306