CVE-2026-60346

Analyzed Analyzed - Analysis Complete

Denial of Service in JD Edwards EnterpriseOne Tools

Publication date: 2026-07-21

Last updated on: 2026-08-06

Assigner: Oracle

Description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security). The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-08-06

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-60346

EUVD

EUVD-2026-46760

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	jd_edwards_enterpriseone_tools	9.2.26.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3. It allows an unauthenticated attacker with network access to cause a partial denial of service (DOS) by exploiting the JDENET component. The attack requires network access but no user interaction.

Detection Guidance

Detection of CVE-2026-60346 requires monitoring for unusual network traffic patterns or service disruptions related to JD Edwards EnterpriseOne Tools version 9.2.26.3. Check for partial denial of service conditions and verify if JDENET protocol access is restricted to authorized sources only.

Impact Analysis

If exploited, this vulnerability could disrupt the availability of JD Edwards EnterpriseOne Tools, leading to partial service outages. This may affect business operations relying on this software for critical functions.

Compliance Impact

This vulnerability causes a partial denial of service in JD Edwards EnterpriseOne Tools, which may impact availability of systems handling sensitive data. Compliance with GDPR or HIPAA could be affected if the partial DOS disrupts access to personal or health information, potentially leading to violations of availability requirements.

Mitigation Strategies

Apply the latest security patches from Oracle for JD Edwards EnterpriseOne Tools version 9.2.26.3. Ensure network access controls restrict JDENET traffic to authorized systems only. Monitor network traffic for unusual activity targeting JDENET ports.

Hi! I’m here to help you understand CVE-2026-60346. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70