Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jd_edwards_enterpriseone_procurement_and_subcontract_management:9.2:*:*:*:*:*:*:*

part: a version: 9.2 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJd Edwards Enterpriseone Procurement And Subcontract Management (e4b4b77f-ac68-5c1f-a34a-0ab649db526b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-60618 vulnerable 2026-09-16 04:32:44.219272 Details available
HIGH (8.8)
Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Procurement and Subcontract Management. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Procurement and Subcontract Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-21T21:36:11.122Z
Updated: 2026-07-29T18:20:27.697Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.