# Oracle Jd Edwards Enterpriseone Tools


- [CVE-2021-42013](https://insights.sbomify.com/CVE-2021-42013/): Apache HTTP Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2020-11023](https://insights.sbomify.com/CVE-2020-11023/): JQuery Cross-Site Scripting (XSS) (medium 6.9, exploited in the wild)
- [CVE-2026-60627](https://insights.sbomify.com/CVE-2026-60627/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.9)
- [CVE-2026-61272](https://insights.sbomify.com/CVE-2026-61272/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46878](https://insights.sbomify.com/CVE-2026-46878/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46879](https://insights.sbomify.com/CVE-2026-46879/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46880](https://insights.sbomify.com/CVE-2026-46880/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46881](https://insights.sbomify.com/CVE-2026-46881/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46882](https://insights.sbomify.com/CVE-2026-46882/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46883](https://insights.sbomify.com/CVE-2026-46883/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46904](https://insights.sbomify.com/CVE-2026-46904/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)
- [CVE-2026-46905](https://insights.sbomify.com/CVE-2026-46905/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/jd-edwards-enterpriseone-tools/