What’s Vulnerable › Products

Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilities

51 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Oracle Corporation JD Edwards EnterpriseOne Orchestrator version is affected

Exploited Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilities

• CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability

Latest Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilities

• CVE-2026-91386 — (CVSS 6.8)
• CVE-2026-91299 — (CVSS 10.0)
• CVE-2026-91285 — (CVSS 6.5)
• CVE-2026-91277 — (CVSS 5.3)
• CVE-2026-91276 — (CVSS 5.3)
• CVE-2026-61270 — (CVSS 8.1)
• CVE-2026-61265 — (CVSS 8.1)
• CVE-2025-21552 — (CVSS 6.5)
• CVE-2024-21168 — (CVSS 6.5)
• CVE-2023-22050 — (CVSS 5.4)
• CVE-2022-21532 — (CVSS 4.3)
• CVE-2021-2052 — (CVSS 5.0)
• CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36181 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-35728 — Serialization gadget exploit in jackson-databind (CVSS 8.1)
• CVE-2020-17521 — (CVSS 5.5)