Oracle JD Edwards

Name: Oracle JD Edwards
Brand: Oracle

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical24high6medium1low

updated 2026-10-27

vulnerabilities (67)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	9.2.9.0	2023-12-18	2 versions
CVE-2024-27983US	—	87.2% (100th)	Exploit	9.2.9.2	2024-04-09	2 versions
CVE-2025-15467US	—	74.8% (100th)	Exploit	no fix	2026-01-27	≤ vers:unknown/*
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	9.2.8.0	2022-08-05	2 versions
CVE-2025-27210US	—	14.3% (97th)	Exploit	no fix	2025-07-18	2 versions
CVE-2023-2650US	medium6.5	75.4% (100th)	—	9.2.8.0	2023-05-30	2 versions
CVE-2024-52046US	critical9.8	24.4% (98th)	—	no fix	2024-12-25	≤ vers:unknown/*
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	≤ vers:unknown/*
CVE-2021-22897US	medium5.3	4.26% (91st)	—	no fix	2021-06-11	≤ vers:unknown/*
CVE-2023-3961US	critical9.8	2.69% (86th)	—	9.2.9.0	2023-11-03	2 versions
CVE-2022-45378US	critical9.8OT elevated	2.49% (85th)	—	no fix	2022-11-14	≤ vers:unknown/*
CVE-2023-28756US	medium5.3	2.45% (84th)	—	9.2.8.1	2023-03-31	2 versions
CVE-2024-27280US	—	2.36% (84th)	—	9.2.9.2	2024-05-14	2 versions
CVE-2023-6129US	medium6.5	2.32% (83rd)	—	9.2.9.0	2024-01-09	2 versions
CVE-2023-32002US	critical9.8OT elevated	1.61% (76th)	—	9.2.8.0	2023-08-21	2 versions
CVE-2025-31672US	—	1.35% (71st)	—	no fix	2025-04-09	≤ vers:unknown/*
CVE-2023-42670US	medium6.5	1.32% (71st)	—	no fix	2023-11-03	2 versions
CVE-2023-1436US	high7.5	1.01% (63rd)	—	9.2.8.0	2023-03-22	2 versions
CVE-2022-3479US	high7.5	0.95% (61st)	—	9.2.8.0	2022-10-14	2 versions
CVE-2025-21524US	—OT elevated	0.79% (56th)	—	9.2.9.2	2025-01-21	2 versions
CVE-2024-29041US	—	0.79% (56th)	—	9.2.9.0	2024-03-25	2 versions
CVE-2025-21509US	—	0.69% (52nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2025-21508US	—	0.69% (52nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2025-21510US	—	0.68% (52nd)	—	9.2.9.0	2025-01-21	2 versions
CVE-2025-21515US	—OT elevated	0.67% (52nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2024-13009US	—	0.55% (46th)	—	no fix	2025-05-08	≤ vers:unknown/*
CVE-2024-20905US	low2.7	0.52% (44th)	—	9.2.8.0	2024-02-17	2 versions
CVE-2025-21514US	—OT elevated	0.50% (42nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2024-20957US	—	0.47% (41st)	—	9.2.8.0	2024-01-16	2 versions
CVE-2026-91295US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91270US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-87313US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-87310US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91305US	critical9.1OT elevated	0.42% (36th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91265US	critical9.1OT elevated	0.42% (36th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2025-21552US	—	0.41% (35th)	—	9.2.9.2	2025-01-21	2 versions
CVE-2025-21517US	—OT elevated	0.40% (35th)	—	9.2.9.0	2025-01-21	2 versions
CVE-2026-87309US	high8.1	0.40% (34th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91273US	high8.6	0.40% (34th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91296US	high8.8	0.39% (33rd)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2025-21527US	—OT elevated	0.38% (32nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2025-21512US	—	0.38% (32nd)	—	9.2.9.2	2025-01-21	2 versions
CVE-2026-91313US	high8.1	0.38% (31st)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-87305US	high8.1	0.38% (31st)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2024-20937US	—	0.38% (31st)	—	9.2.8.1	2024-02-17	2 versions
CVE-2026-91269US	high8.1	0.36% (30th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-87306US	high8.1	0.36% (30th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91310US	high8.8	0.33% (26th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91268US	high8.8	0.33% (26th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2025-21511US	—	0.32% (24th)	—	9.2.9.2	2025-01-21	2 versions

showing 50 of 67

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication15 CVEs
CWE-20Improper Input Validation11 CVEs
CWE-266Incorrect Privilege Assignment6 CVEs
CWE-306Missing Authentication for Critical Function5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)38 CVEs
NLNCSC-NL (CSAF)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan