Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91306 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91304 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91303 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91302 | low | 3.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91301 | low | 3.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91300 | low | 3.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91298 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91297 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91296 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91295 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91294 | medium | 4.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-10-28 |
| CVE-2026-91293 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-10-28 |
| CVE-2026-91292 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is a... | 2026-10-28 |
| CVE-2026-91291 | low | 3.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions t... | 2026-10-28 |
| CVE-2026-91290 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91289 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91288 | high | 7.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-28 |
| CVE-2026-91287 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91286 | high | 8.2 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-83525 | not reported | — | No | Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all pl... | 2026-10-28 |