Vulnerability in the JD Edwards EnterpriseOne Tools component Interoperability SEC allows a low‑privileged attacker with network access via JDENET to compromise the system. Successful exploitation can result in unauthorized creation, deletion or modification of critical data and full access to all data exposed through JD Edwards EnterpriseOne Tools, leading to significant confidentiality and integrity impacts.

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5 are affected. The vulnerability is specific to the JDENET interface of the JD Edwards product line.

The CVSS 3.1 score of 8.1 indicates high severity with high confidentiality and integrity impact. The description states the vulnerability is easily exploitable by low‑privileged users over the network, and the EPSS score of < 1% indicates a very low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would need only network access to JDENET and could gain unauthorized data access or modification without elevated privileges.