# Oracle Corporation JD Edwards EnterpriseOne Orchestrator.

Every CVE that names Oracle Corporation JD Edwards EnterpriseOne Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91386.md)
  `CVE-2026-91386` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 6.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91299.md)
  `CVE-2026-91299` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91285.md)
  `CVE-2026-91285` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Information disclosure in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91277.md)
  `CVE-2026-91277` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Information disclosure
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-91276.md)
  `CVE-2026-91276` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-61270.md)
  `CVE-2026-61270` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2026-61265.md)
  `CVE-2026-61265` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control
- [Weak authentication in Oracle Corporation JD Edwards EnterpriseOne Orchestrator](https://agentprime.io/advisories/CVE-2025-21552.md)
  `CVE-2025-21552` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 6.5 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Authentication bypass
- [Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…](https://agentprime.io/advisories/CVE-2024-21168.md)
  `CVE-2024-21168` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2024
- [Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…](https://agentprime.io/advisories/CVE-2023-22050.md)
  `CVE-2023-22050` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 5.4 Medium · Not analysed yet · Published 18 Jul 2023
- [Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…](https://agentprime.io/advisories/CVE-2022-21532.md)
  `CVE-2022-21532` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2022
- [Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…](https://agentprime.io/advisories/CVE-2021-2052.md)
  `CVE-2021-2052` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Orchestrator · CVSS 5.8 Medium · Not analysed yet · Published 20 Jan 2021

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=oracle-corporation-jd-edwards-enterpriseone-orchestrator>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/oracle-corporation-jd-edwards-enterpriseone-orchestrator/>. Everything for agents: <https://agentprime.io/llms.txt>.