CVE-2026-91330

The record

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

Affected packages

Related vulnerabilities

• CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
• CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
• CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
• CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404
• CVE-2026-118271 A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. CWE-404
• CVE-2026-117505 A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. CWE-404
• CVE-2026-117506 A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. CWE-404
• CVE-2026-117504 A vulnerability was identified in a2aproject a2a-go up to 2.4.0. CWE-404