Vulnerability in JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - Cloud) allows a high‑privileged attacker with local logon to the infrastructure to modify data or partially disrupt service. The flaw is difficult to exploit and permits unauthorized update, insert or delete of accessible data and a limited denial of service. It is classified as a low‑to‑moderate severity issue with a CVSS 3.1 base score of 3.0 that affects integrity and availability. The weakness can be mapped to improper access control or privilege management.

Affected products are Oracle JD Edwards EnterpriseOne Tools, specifically the E1 Dev Platform Tech - Cloud component. Versions 9.2.0.0 through 9.2.26.5 are vulnerable.

The risk is low overall given the low CVSS score, the EPSS score of less than 1% indicating a very low likelihood of exploitation, and the absence from the CISA KEV catalogue. The flaw requires a high‑privileged, locally authenticated user on the machine where JD Edwards EnterpriseOne Tools runs, so an external attacker would need to compromise the infrastructure first. Once the attacker gains such privileges, they could compromise data integrity or partially deny service, but the impact does not extend beyond the tool itself.