Advisories · Technology

Oracle Corporation JD Edwards EnterpriseOne Orchestrator.

Every CVE that names Oracle Corporation JD Edwards EnterpriseOne Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91386 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91299 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91285 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91277 CVE record

CVSS 5.3 Medium

Information disclosure in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91276 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-61270 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-61265 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2025-21552 CVE record

CVSS 6.5 Medium

Weak authentication in Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
- Authentication bypass
Not analysed yet 21 Jan 2025
CVE-2024-21168 CVE record

CVSS 6.5 Medium

Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
Not analysed yet 16 Jul 2024
CVE-2023-22050 CVE record

CVSS 5.4 Medium

Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
Not analysed yet 18 Jul 2023
CVE-2022-21532 CVE record

CVSS 4.3 Medium

Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
Not analysed yet 19 Jul 2022
CVE-2021-2052 CVE record

CVSS 5.8 Medium

Oracle Corporation JD Edwards EnterpriseOne Orchestrator: Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards…
- Oracle Corporation JD Edwards EnterpriseOne Orchestrator
Not analysed yet 20 Jan 2021