Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

23 records in Agile Product Lifecycle Management For Process · all components

TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79

TI-2019-08480 CVE-2019-11358 · GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles…

HIGH 69

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.8682 Published 2019-04-19 Partial fix · 3.4.0, 4.3.4 +3 CWE-1321

TI-2015-07630 CVE-2015-9251 · GHSA-rmxg-73gg-4p98

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a…

MEDIUM 51

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.29726 Published 2018-01-18 Partial fix · 1.12.2, 3.0.0 +1 CWE-79

TI-2026-43827 CVE-2026-61183 · GHSA-87v5-64f9-h996

Improper authentication in Oracle Agile Product Lifecycle Management for Process

MEDIUM 49

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287

TI-2026-43822 CVE-2026-61178 · GHSA-fp6h-589p-42xr

Improper authentication in Oracle Agile Product Lifecycle Management for Process

MEDIUM 49

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287

TI-2026-17668 CVE-2026-21969 · GHSA-6pvv-p546-3f6h

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of…

MEDIUM 49

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00491 Published 2026-01-20 No fix listed

TI-2026-43828 CVE-2026-61184 · GHSA-m8f3-rr2w-26ff

Improper access control in Oracle Agile Product Lifecycle Management for Process

MEDIUM 48

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-284

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2026-43824 CVE-2026-61180 · GHSA-5c68-w65x-mqmr

Improper privilege management in Oracle Agile Product Lifecycle Management for Process

MEDIUM 40

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

TI-2026-43823 CVE-2026-61179 · GHSA-v3h3-3683-pqf4

Improper privilege management in Oracle Agile Product Lifecycle Management for Process

MEDIUM 40

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

TI-2024-13884 CVE-2024-21092 · GHSA-2r6j-h9fw-2v55

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of…

LOW 38

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00596 Published 2024-04-16 No fix listed

TI-2024-13749 CVE-2024-20956 · GHSA-xh58-v5pj-37jw

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of…

LOW 38

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00439 Published 2024-02-17 Fixed in 6.2.4.2

TI-2026-43832 CVE-2026-61188 · GHSA-rgq8-w5vh-3jq5

Improper privilege management in Oracle Agile Product Lifecycle Management for Process

LOW 35

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-07-21 No fix listed CWE-269

TI-2026-43825 CVE-2026-61181 · GHSA-vhrp-rxg4-jj72

Improper access control in Oracle Agile Product Lifecycle Management for Process

LOW 35

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0027 Published 2026-07-21 No fix listed CWE-284

TI-2026-43829 CVE-2026-61185 · GHSA-wj35-x2qj-6r5c

Information disclosure in Oracle Agile Product Lifecycle Management for Process

LOW 34

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation).

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00341 Published 2026-07-21 No fix listed CWE-200

TI-2026-43826 CVE-2026-61182 · GHSA-m29v-xp23-r35r

Improper privilege management in Oracle Agile Product Lifecycle Management for Process

LOW 31

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import).

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00181 Published 2026-07-21 No fix listed CWE-269

TI-2026-17644 CVE-2026-21944 · GHSA-pqm3-2r24-px6q

Cross-site scripting in Oracle Agile Product Lifecycle Management for Process

LOW 30

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00334 Published 2026-01-20 No fix listed CWE-79

TI-2024-13883 CVE-2024-21091 · GHSA-5g36-q32h-jr9h

Improper access control in Oracle Agile Product Lifecycle Management for Process

LOW 29

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00446 Published 2024-04-16 No fix listed CWE-284

TI-2018-01891 CVE-2018-2572 · GHSA-pf7j-p2fc-2277

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of…

LOW 29

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00971 Published 2018-04-19 No fix listed

TI-2018-02424 CVE-2018-3134 · GHSA-7xjq-jwh8-5q8w

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of…

LOW 23

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: User Group Management).

CVSS 3.0MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00403 Published 2018-10-17 No fix listed

TI-2026-26585 CVE-2026-34296 · GHSA-7mfh-vh4q-xgr5

Information disclosure in Oracle Agile Product Lifecycle Management for Process

LOW 19

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-04-21 No fix listed CWE-200

TI-2016-04772 CVE-2016-5504 · GHSA-jfrv-59mj-p5v7

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process…

LOW 19

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vector…

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00314 Published 2016-10-25 No fix listed CWE-200

TI-2018-02371 CVE-2018-3069 · GHSA-98h5-4j63-gwrf

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of…

LOW 16

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation).

CVSS 3.0LOW 2.7 Network High privileges No interaction EPSS 0.01023 Published 2018-07-18 No fix listed

Open these records in search →