Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

36 records in Applications Framework · all components

TI-2021-01876 CVE-2021-2200 · GHSA-66vj-78p3-r8q8

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

MEDIUM 50

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01191 Published 2021-04-22 No fix listed

TI-2026-57566 CVE-2026-83327 · GHSA-8j59-j7vj-wc22

Improper authentication in Oracle Applications Framework

MEDIUM 49

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2026-09-15 No fix listed CWE-287

TI-2026-44660 CVE-2026-62546 · GHSA-h45q-f2rp-2rf6

Improper access control in Oracle Applications Framework

MEDIUM 42

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284

TI-2022-05946 CVE-2022-21566 · GHSA-frj6-3m84-3f83

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

MEDIUM 41

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01104 Published 2022-07-19 No fix listed

TI-2026-44648 CVE-2026-62534 · GHSA-v4r8-6r5r-r9wh

Improper privilege management in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

TI-2026-43339 CVE-2026-60676 · GHSA-rfqc-v2rx-54p2

Improper access control in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-43338 CVE-2026-60675 · GHSA-8v2h-7fvm-w28p

Improper access control in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2018-02530 CVE-2018-3243 · GHSA-4mpm-grm8-3v5m

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite…

MEDIUM 40

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.02051 Published 2018-10-17 No fix listed

TI-2017-02724 CVE-2017-3528 · GHSA-hcw2-v6gc-xmm9

Open redirect in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)).

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.14622 Published 2017-04-24 No fix listed CWE-601

TI-2020-11384 CVE-2020-14534 · GHSA-3cgh-jhhf-99jx

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01432 Published 2020-07-15 No fix listed

TI-2020-02589 CVE-2020-2890 · GHSA-7qvw-crqm-r4rj

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01461 Published 2020-04-15 No fix listed

TI-2019-02231 CVE-2019-2682 · GHSA-8xm7-mq63-gv2r

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite…

LOW 38

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01287 Published 2019-04-23 No fix listed

TI-2026-43428 CVE-2026-60768 · GHSA-45fj-7pmr-8hr5

Improper access control in Oracle Applications Framework

LOW 37

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2020-11459 CVE-2020-14610 · GHSA-q2qc-9pjq-74f3

Cross-site scripting in Oracle Applications Framework

LOW 35

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00929 Published 2020-07-15 No fix listed CWE-79

TI-2021-02049 CVE-2021-2380 · GHSA-8m6c-x4jx-xgx8

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 34

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0069 Published 2021-07-20 No fix listed

TI-2021-02136 CVE-2021-2477 · GHSA-v662-cr8f-hg7r

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01463 Published 2021-10-20 No fix listed

TI-2020-02369 CVE-2020-2666 · GHSA-gv8p-3h6v-ghw7

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01287 Published 2020-01-15 No fix listed

TI-2016-02907 CVE-2016-3447 · GHSA-922v-54xc-7x5x

Unspecified vulnerability in the Oracle Applications Framework component in Oracle…

LOW 33

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related t…

CVSS 3.0MEDIUM 6.9 Network No auth User interaction EPSS 0.01245 Published 2016-04-21 No fix listed

TI-2020-02565 CVE-2020-2866 · GHSA-2qhw-v6v2-pp46

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 32

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01087 Published 2020-04-15 No fix listed

TI-2026-43434 CVE-2026-60774 · GHSA-3h92-24v4-85mc

Improper access control in Oracle Applications Framework

LOW 31

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.003 Published 2026-07-21 No fix listed CWE-284

TI-2022-06015 CVE-2022-21636 · GHSA-j2vq-gw3q-qhc5

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 30

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00838 Published 2022-10-18 No fix listed

TI-2024-13872 CVE-2024-21080 · GHSA-3xqv-2ccr-mmcc

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 29

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00509 Published 2024-04-16 No fix listed

TI-2022-05853 CVE-2022-21468 · GHSA-pxr2-xgv2-7cq3

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 29

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00891 Published 2022-04-19 No fix listed

TI-2025-31984 CVE-2025-50071 · GHSA-8c7h-fr9h-c84m

Improper access control in Oracle Applications Framework

LOW 28

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00278 Published 2025-07-15 No fix listed CWE-284

TI-2023-08412 CVE-2023-22042 · GHSA-9f8c-4rfr-vhqx

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 28

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2023-07-18 No fix listed

Open these records in search →