Login Request a demo
JE
Product
JD Edwards EnterpriseOne Orchestrator
by Oracle Corporation · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
45
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 11High 26Medium 8Low 0
Severity
All severities45Critical11High26Medium8Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add JD Edwards EnterpriseOne Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: before 9.2.5.0
CVE-2025-21552
6.5
0%
Jan 21
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security)
Affected: before 9.2.9.2
CVE-2024-21168
6.5
0%
Jul 16
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security)
Affected: before 9.2.8.3
CVE-2021-2052
5.8
1%
Jan 20
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security)
Affected: before 9.2.5.1
CVE-2020-17521
5.5
1%
Dec 7
Apache Groovy provides extension methods to aid with creating temporary directories
Affected: 9.2.6.0
CVE-2023-22050
5.4
0%
Jul 18
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security)
Affected: before 9.2.7.4
CVE-2020-13956
5.3
9%
Dec 2
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick…
Affected: before 9.2.6.0
CVE-2022-21532
4.3
1%
Jul 19
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator)
Affected: through 9.2.6.3
Showing 8