Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

20 records in Agile Plm Mcad Connector · all components

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20

TI-2026-49760 CVE-2026-71067 · GHSA-hjmc-xxrf-6mfx

Missing authentication in Oracle Agile PLM MCAD Connector

MEDIUM 40

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-306

TI-2026-49761 CVE-2026-71068 · GHSA-c348-mc25-xqr5

Missing authentication in Oracle Agile PLM MCAD Connector

LOW 37

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-306

TI-2026-49762 CVE-2026-71069 · GHSA-5x5h-hp2w-629w

Improper access control in Oracle Agile PLM MCAD Connector

LOW 35

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-08-18 No fix listed CWE-284

TI-2026-49769 CVE-2026-71076 · GHSA-jqgp-w6g6-26vj

Improper access control in Oracle Agile PLM MCAD Connector

LOW 30

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2026-08-18 No fix listed CWE-284

TI-2026-49763 CVE-2026-71070 · GHSA-c8xr-256q-qhgf

Improper access control in Oracle Agile PLM MCAD Connector

LOW 29

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00352 Published 2026-08-18 No fix listed CWE-284

TI-2020-13270 CVE-2020-17521 · GHSA-rcjj-h6gh-jf3r

Apache Groovy provides extension methods to aid with creating temporary directories.

LOW 27

Apache Groovy provides extension methods to aid with creating temporary directories.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01027 Published 2020-12-07 Partial fix · 2.4.21, 2.5.14 +1 CWE-379

TI-2026-49768 CVE-2026-71075 · GHSA-6v59-gv47-wvhr

Improper access control in Oracle Agile PLM MCAD Connector

LOW 26

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 5.9 Adjacent network No auth No interaction EPSS 0.0027 Published 2026-08-18 No fix listed CWE-284

TI-2026-49779 CVE-2026-71087 · GHSA-cw68-cvq6-7mvp

Information disclosure in Oracle Agile PLM MCAD Connector

LOW 24

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00337 Published 2026-08-18 No fix listed CWE-200

TI-2026-49770 CVE-2026-71077 · GHSA-4gc5-v3fx-mpqc

Improper access control in Oracle Agile PLM MCAD Connector

LOW 24

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00276 Published 2026-08-18 No fix listed CWE-284

TI-2026-49780 CVE-2026-71088 · GHSA-h56m-2hmh-f5rq

Improper access control in Oracle Agile PLM MCAD Connector

LOW 22

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00253 Published 2026-08-18 No fix listed CWE-284

TI-2026-49764 CVE-2026-71071 · GHSA-2g29-39pp-cvcc

Improper access control in Oracle Agile PLM MCAD Connector

LOW 21

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2026-08-18 No fix listed CWE-284

TI-2026-49759 CVE-2026-71066 · GHSA-xjm8-fr3w-hjjm

Improper access control in Oracle Agile PLM MCAD Connector

LOW 20

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 4.5 Local No auth User interaction EPSS 0.00126 Published 2026-08-18 No fix listed CWE-284

TI-2026-49771 CVE-2026-71078 · GHSA-jvg2-9rpg-8ch9

Improper access control in Oracle Agile PLM MCAD Connector

LOW 18

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1MEDIUM 4.2 Local Low privileges User interaction EPSS 0.00107 Published 2026-08-18 No fix listed CWE-284

TI-2026-49773 CVE-2026-71080 · GHSA-p94x-f4v6-97mj

Improper access control in Oracle Agile PLM MCAD Connector

LOW 17

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 3.7 Adjacent network No auth User interaction EPSS 0.00226 Published 2026-08-18 No fix listed CWE-284

TI-2026-49781 CVE-2026-71089 · GHSA-wc9v-3qjr-pxmw

Improper access control in Oracle Agile PLM MCAD Connector

LOW 15

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0016 Published 2026-08-18 No fix listed CWE-284

TI-2026-49765 CVE-2026-71072 · GHSA-jpm3-xwfp-7v82

Improper access control in Oracle Agile PLM MCAD Connector

LOW 15

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00137 Published 2026-08-18 No fix listed CWE-284

TI-2026-49775 CVE-2026-71082 · GHSA-85fq-c8rg-c3r9

Improper access control in Oracle Agile PLM MCAD Connector

LOW 12

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00117 Published 2026-08-18 No fix listed CWE-284

TI-2026-49776 CVE-2026-71083 · GHSA-669f-c9h6-jg39

Improper access control in Oracle Agile PLM MCAD Connector

LOW 9

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 1.8 Local High privileges User interaction EPSS 0.00126 Published 2026-08-18 No fix listed CWE-284

TI-2026-49774 CVE-2026-71081 · GHSA-mqp4-cjcp-3j5x

Improper access control in Oracle Agile PLM MCAD Connector

LOW 9

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).

CVSS 3.1LOW 1.9 Local High privileges No interaction EPSS 0.00129 Published 2026-08-18 No fix listed CWE-284

Open these records in search →