Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

57 records in Access Manager · all components

TI-2021-14313 CVE-2021-35587 · GHSA-x3jv-936g-xqj4

Missing authentication in Oracle Access Manager

CRITICAL 100KEV

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96284 Published 2022-01-19 No fix listed CWE-306

TI-2020-02258 CVE-2020-2555 · GHSA-gm93-pfh3-mrf3

Deserialization of untrusted data in Oracle WebCenter Portal

CRITICAL 100KEV

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97116 Published 2020-01-15 No fix listed CWE-502

TI-2018-02188 CVE-2018-2879 · GHSA-5xgp-rmw9-5cfw

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware…

MEDIUM 60

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.21362 Published 2018-04-19 No fix listed

TI-2026-77128 CVE-2026-87251 · GHSA-9m34-ch75-mhw4

Oracle Access Manager flaw allows unauthenticated SAML takeover

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2026-10-20 No fix listed CWE-287

TI-2026-51962 CVE-2026-73950 · GHSA-96vr-v34g-rr34

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-51959 CVE-2026-73947 · GHSA-6w58-576w-wwgv

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-51952 CVE-2026-73940 · GHSA-2q2m-g9vr-6rgh

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-49824 CVE-2026-71133 · GHSA-xjfx-m8p8-h9ph

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-49598 CVE-2026-70905 · GHSA-hv69-9965-h4cf

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-287

TI-2026-43709 CVE-2026-61065 · GHSA-v25v-j57p-xvpv

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287

TI-2026-43058 CVE-2026-60358 · GHSA-55xr-q9c4-gj9c

Improper access control in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-43055 CVE-2026-60355 · GHSA-h9x2-2g66-p8r3

Missing authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306

TI-2026-43029 CVE-2026-60328 · GHSA-qgg4-48vf-pgc7

Improper authentication in Oracle Access Manager

MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287

TI-2026-51956 CVE-2026-73944 · GHSA-q3j2-grqp-w6f4

Improper authentication in Oracle Access Manager

MEDIUM 48

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-09-15 No fix listed CWE-287

TI-2026-43027 CVE-2026-60326 · GHSA-7v8w-hh6v-r9r7

Improper authentication in Oracle Access Manager

MEDIUM 48

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-287

TI-2021-10139 CVE-2021-29425 · GHSA-gwrp-pvrq-jmwv

Possible limited path traversal vulnerabily in Apache Commons IO

MEDIUM 48

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.10549 Published 2021-04-13 Partial fix · 2.7 CWE-20

TI-2018-02055 CVE-2018-2739 · GHSA-mj8f-mxwr-xvp3

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware…

MEDIUM 46

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin).

CVSS 3.0CRITICAL 9.3 Network No auth User interaction EPSS 0.02242 Published 2018-04-19 No fix listed

TI-2026-43224 CVE-2026-60559 · GHSA-3f65-rrqv-fx7g

Improper access control in Oracle Access Manager

MEDIUM 45

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284

TI-2026-43056 CVE-2026-60356 · GHSA-95qg-63jr-rxmp

Missing authentication in Oracle Access Manager

MEDIUM 45

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-306

TI-2026-77178 CVE-2026-87337 · GHSA-m5hf-f8cr-8px8

Oracle Access Manager flaw exposes data to unauthenticated attackers

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00462 Published 2026-10-20 No fix listed CWE-200

TI-2026-51974 CVE-2026-73962 · GHSA-gf36-p3h9-4h4j

Improper access control in Oracle Access Manager

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00362 Published 2026-09-15 No fix listed CWE-284

TI-2026-51957 CVE-2026-73945 · GHSA-ccmq-pfp5-xc2v

Improper access control in Oracle Access Manager

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-09-15 No fix listed CWE-284

TI-2026-51953 CVE-2026-73941 · GHSA-r79g-r8hv-489x

Improper access control in Oracle Access Manager

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-09-15 No fix listed CWE-284

TI-2026-49854 CVE-2026-71163 · GHSA-xfr2-j99q-c42c

Improper access control in Oracle Access Manager

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00387 Published 2026-09-15 No fix listed CWE-284

TI-2026-43034 CVE-2026-60333 · GHSA-m8mw-5f48-qq89

Improper authentication in Oracle Access Manager

MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-287

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2