[NEW] [high] Oracle JD Edwards: Multiple vulnerabilities

highpublic exploitCVE-2021-22555 CVE-2026-60346 CVE-2026-60347 CVE-2026-60489 CVE-2026-60490 CVE-2026-60492

A remote, anonymous, or authenticated attacker can exploit multiple vulnerabilities in Oracle JD Edwards to compromise confidentiality, integrity, and availability.

CSIRTS triage

vendor: Oracle product: JD Edwards Remote code execution Information disclosure Denial of service

What: Multiple vulnerabilities can compromise confidentiality, integrity, and availability.
Who is affected: Deployments of Oracle JD Edwards are affected.
Urgency: Remediation is urgent due to high severity and confirmed exploitation.
Action: Apply the latest security patches provided by Oracle.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch JD Edwards

Get an email when a new JD Edwards advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-07-22
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2442

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation likely imminentCVE-2021-22555EPSS puts this in the most-targeted tier (78.7% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all scored CVEs.
Low exploitation riskCVE-2026-603460.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
Low exploitation riskCVE-2026-603470.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-604890.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
Low exploitation riskCVE-2026-604900.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
Low exploitation riskCVE-2026-604920.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all scored CVEs.
Low exploitation riskCVE-2026-604930.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all scored CVEs.
Low exploitation riskCVE-2026-604940.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
Low exploitation riskCVE-2026-604950.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
Low exploitation riskCVE-2026-604960.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2021-22555	coverage & exploitation status	NVD · CVE.org
CVE-2026-60346	coverage & exploitation status	NVD · CVE.org
CVE-2026-60347	coverage & exploitation status	NVD · CVE.org
CVE-2026-60489	coverage & exploitation status	NVD · CVE.org
CVE-2026-60490	coverage & exploitation status	NVD · CVE.org
CVE-2026-60492	coverage & exploitation status	NVD · CVE.org
CVE-2026-60493	coverage & exploitation status	NVD · CVE.org
CVE-2026-60494	coverage & exploitation status	NVD · CVE.org
CVE-2026-60495	coverage & exploitation status	NVD · CVE.org
CVE-2026-60496	coverage & exploitation status	NVD · CVE.org
CVE-2026-60497	coverage & exploitation status	NVD · CVE.org
CVE-2026-60498	coverage & exploitation status	NVD · CVE.org
CVE-2026-60499	coverage & exploitation status	NVD · CVE.org
CVE-2026-60618	coverage & exploitation status	NVD · CVE.org
CVE-2026-60619	coverage & exploitation status	NVD · CVE.org
CVE-2026-60620	coverage & exploitation status	NVD · CVE.org
CVE-2026-60621	coverage & exploitation status	NVD · CVE.org
CVE-2026-60626	coverage & exploitation status	NVD · CVE.org
CVE-2026-60627	coverage & exploitation status	NVD · CVE.org
CVE-2026-60628	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Oracle JD Edwards

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

lowCVE-2026-60628: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: I…nvd · 2026-07-21
criticalCVE-2026-60627: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: I…nvd · 2026-07-21
mediumCVE-2026-60626: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: I…nvd · 2026-07-21
highCVE-2026-60621: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: W…nvd · 2026-07-21
mediumCVE-2026-60620: Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (compo…nvd · 2026-07-21
highCVE-2026-60619: Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (com…nvd · 2026-07-21