Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

42 records in Application Object Library · all components

TI-2017-07597 CVE-2017-10246 · GHSA-4984-pgvj-xrgr

Vulnerability in the Oracle Application Object Library component of Oracle E-Business…

MEDIUM 57

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp).

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.13937 Published 2017-08-08 No fix listed

TI-2017-07671 CVE-2017-10328 · GHSA-5vmw-7fpp-p5vx

Information disclosure in Oracle Application Object Library

MEDIUM 44

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02533 Published 2017-10-19 No fix listed CWE-200

TI-2026-43433 CVE-2026-60773 · GHSA-c852-j46p-37gp

Improper access control in Oracle Application Object Library

MEDIUM 43

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2026-43760 CVE-2026-61116 · GHSA-2q86-qxmm-vmgc

Information disclosure in Oracle Application Object Library

MEDIUM 41

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200

TI-2017-07528 CVE-2017-10177 · GHSA-c9cc-px99-x7ch

Vulnerability in the Oracle Application Object Library component of Oracle E-Business…

MEDIUM 41

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Flexfields).

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01952 Published 2017-08-08 No fix listed

TI-2018-02428 CVE-2018-3138 · GHSA-8783-x78j-4qxv

Vulnerability in the Oracle Application Object Library component of Oracle E-Business…

MEDIUM 40

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.02009 Published 2018-10-17 No fix listed

TI-2025-22003 CVE-2025-30730 · GHSA-wwhc-9g9r-776m

Uncontrolled resource consumption in Oracle Application Object Library

LOW 39

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00461 Published 2025-04-15 No fix listed CWE-400

TI-2021-01987 CVE-2021-2314 · GHSA-84hv-67hg-3h3h

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00987 Published 2021-04-22 No fix listed

TI-2026-43758 CVE-2026-61114 · GHSA-7m96-4987-p8ch

Improper privilege management in Oracle Application Object Library

LOW 35

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-07-21 No fix listed CWE-269

TI-2026-43430 CVE-2026-60770 · GHSA-4fj7-8fj6-qqvx

Improper access control in Oracle Application Object Library

LOW 35

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-07-21 No fix listed CWE-284

TI-2024-13722 CVE-2024-20929 · GHSA-c7q4-q2c5-57q3

Improper access control in Oracle Application Object Library

LOW 35

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00322 Published 2024-02-17 No fix listed CWE-284

TI-2026-43757 CVE-2026-61113 · GHSA-2gp7-3rf2-fjhq

Improper access control in Oracle Application Object Library

LOW 34

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0034 Published 2026-07-21 No fix listed CWE-284

TI-2018-02531 CVE-2018-3244 · GHSA-qhfq-jc5x-c4c2

Vulnerability in the Oracle Application Object Library component of Oracle E-Business…

LOW 34

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01943 Published 2018-10-17 No fix listed

TI-2017-07674 CVE-2017-10331 · GHSA-gwf9-4399-2fh7

Information disclosure in Oracle Application Object Library

LOW 34

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01985 Published 2017-10-19 No fix listed CWE-200

TI-2017-07595 CVE-2017-10244 · GHSA-f7rm-cgrg-hpmf

Vulnerability in the Oracle Application Object Library component of Oracle E-Business…

LOW 34

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01985 Published 2017-08-08 No fix listed

TI-2017-02752 CVE-2017-3556 · GHSA-h4xg-qr4x-74g2

Information disclosure in Oracle Application Object Library

LOW 34

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02106 Published 2017-04-24 No fix listed CWE-200

TI-2016-03005 CVE-2016-3545 · GHSA-8grq-p3rh-q3cg

Unspecified vulnerability in the Oracle Application Object Library component in Oracle…

LOW 34

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web base…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02305 Published 2016-07-21 No fix listed

TI-2019-02549 CVE-2019-3027 · GHSA-qpvv-w8gv-jpvp

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01563 Published 2019-10-16 No fix listed

TI-2020-11484 CVE-2020-14635 · GHSA-574c-4j7x-8x44

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite…

LOW 32

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01205 Published 2020-07-15 No fix listed

TI-2016-00542 CVE-2016-0589 · GHSA-4w7g-2v6p-24m9

Unspecified vulnerability in the Oracle Application Object Library component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01817 Published 2016-01-21 No fix listed

TI-2016-00529 CVE-2016-0576 · GHSA-fv3w-qq8r-9v35

Unspecified vulnerability in the Oracle Application Object Library component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via vectors related to ICX LOVs.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01748 Published 2016-01-21 No fix listed

TI-2008-02496 CVE-2008-2606 · GHSA-434r-f9m8-6m25

Unspecified vulnerability in the Oracle Application Object Library component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0137 Published 2008-07-15 No fix listed

TI-2026-43436 CVE-2026-60776 · GHSA-p5w8-2xj9-8942

Improper access control in Oracle Application Object Library

LOW 31

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: AOL Generic Loader).

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00181 Published 2026-07-21 No fix listed CWE-284

TI-2024-13708 CVE-2024-20915 · GHSA-q3qj-89j7-f5fh

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite…

LOW 31

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login - SSO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00493 Published 2024-02-17 No fix listed CWE-444

TI-2026-43755 CVE-2026-61111 · GHSA-98mw-gh37-7pm8

Improper access control in Oracle Application Object Library

LOW 30

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00154 Published 2026-07-21 No fix listed CWE-284

Open these records in search →