CVE-2026-87386

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in JD Edwards EnterpriseOne General Ledger

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: Oracle

Description

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne General Ledger. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne General Ledger. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-87386

EUVD

EUVD-2026-106427

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	JD Edwards EnterpriseOne General Ledger	9.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle JD Edwards EnterpriseOne General Ledger version 9.2. It allows a low-privileged attacker with network access to cause the system to hang or crash repeatedly, resulting in a denial of service (DOS). The attack vector is via JDENET, and the impact is limited to availability.

Detection Guidance

Detection of CVE-2026-87386 requires monitoring for unusual network traffic or crashes in JD Edwards EnterpriseOne General Ledger version 9.2. Check for repeated crashes or hangs in the application logs. Inspect JDENET protocol traffic for suspicious patterns. Ensure the system is updated to the latest patch to mitigate the risk.

Impact Analysis

If exploited, this vulnerability could disrupt access to the JD Edwards EnterpriseOne General Ledger system, causing downtime and preventing users from performing financial or accounting tasks. This could lead to operational delays and potential loss of productivity.

Compliance Impact

This vulnerability causes denial-of-service (DOS) conditions in JD Edwards EnterpriseOne General Ledger, which could disrupt critical financial operations. Such disruptions may impact compliance with GDPR (data availability) and HIPAA (system reliability for protected health information).

Mitigation Strategies

Apply the latest security patches from Oracle for JD Edwards EnterpriseOne General Ledger version 9.2 to address the vulnerability in the E1 Foundation component.

Hi! I’m here to help you understand CVE-2026-87386. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...