CVE-2026-87318 Oracle Corporation CVE debrief

Who should care

Defenders responsible for JD Edwards EnterpriseOne Tools systems, especially those with low-privileged users, should assess exposure and potential impact. Roles responsible for JD Edwards EnterpriseOne Tools systems should prioritize verifying access controls and ensuring appropriate security measures are in place.

Why it matters

Defenders should care about CVE-2026-87318 because it allows low privileged attackers with logon access to compromise JD Edwards EnterpriseOne Tools, potentially leading to data integrity and confidentiality impacts. Roles responsible for JD Edwards EnterpriseOne Tools systems, especially those with low-privileged users, should assess exposure and prioritize verifying access controls and ensuring appropriate security measures are in place. The vulnerability's impact requires verification from official sources, and its exploitation is difficult. Evidence is limited, and further verification is needed to determine affected versions, exploitation, and remediation.

• Potential unauthorized creation, deletion or modification access to critical data or all JD Edwards EnterpriseOne Tools accessible data.
• Potential unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data.

Technical summary

The vulnerability in JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC) has a CVSS 3.1 Base Score of 6.3 (Confidentiality and Integrity impacts). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all JD Edwards EnterpriseOne Tools accessible data as well as unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Tools accessible data. The vulnerability allows low privileged attackers with logon to the infrastructure where JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on systems with low-privileged users and ensuring appropriate access controls are in place.

Recommended defensive actions

• Verify if systems with JD Edwards EnterpriseOne Tools have low-privileged users with logon access to the infrastructure.
• Assess potential impact on critical data and ensure appropriate access controls are in place.
• Review and update access controls to limit unauthorized creation, deletion or modification access to critical data.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, its impacts, and affected versions. Oracle's security alert page may contain additional details. Evidence is limited, and further verification is needed to determine affected versions, exploitation, and remediation. Defenders should verify exposure and assess potential impact, focusing on systems with low-privileged users and ensuring appropriate access controls are in place.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.