Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

24 records in Applications Manager · all components

TI-2018-02298 CVE-2018-2996 · GHSA-489v-q93q-hh9m

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite…

MEDIUM 44

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02675 Published 2018-07-18 No fix listed

TI-2017-07495 CVE-2017-10144 · GHSA-vc9g-f526-gcm7

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite…

MEDIUM 44

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02822 Published 2017-08-08 No fix listed

TI-2026-34539 CVE-2026-46933 · GHSA-q7xw-w6g3-59jx

Improper privilege management in Oracle Applications Manager

MEDIUM 43

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-269

TI-2026-78042 CVE-2026-101742 · GHSA-rgf2-wh6q-grj9

Access control flaw in Oracle Applications Manager allows takeover

MEDIUM 40

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00448 Published 2026-10-20 No fix listed CWE-284

TI-2026-77570 CVE-2026-91532 · GHSA-qfr8-7f4p-28h4

Oracle Applications Manager missing authentication for critical functionality

MEDIUM 40

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-306

TI-2021-14293 CVE-2021-35566 · GHSA-vmmv-4gv3-2v5j

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

MEDIUM 40

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0129 Published 2021-10-20 No fix listed

TI-2018-02523 CVE-2018-3235 · GHSA-42x4-7rwv-4vjm

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite…

MEDIUM 40

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: None).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.02051 Published 2018-10-17 No fix listed

TI-2026-77860 CVE-2026-101551 · GHSA-r6xf-3c63-99h7

Missing authentication in Oracle Applications Manager exposes data

LOW 39

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2026-10-20 No fix listed CWE-200

TI-2026-43423 CVE-2026-60763 · GHSA-c5fg-prhw-hj9c

Improper access control in Oracle Applications Manager

LOW 38

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00189 Published 2026-07-21 No fix listed CWE-284

TI-2020-11596 CVE-2020-14761 · GHSA-qh4q-2rcj-8fjx

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 37

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01003 Published 2020-10-21 No fix listed

TI-2026-43023 CVE-2026-60322 · GHSA-84rj-pcmg-3qrm

Missing authentication in Oracle Applications Manager

LOW 35

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00272 Published 2026-07-21 No fix listed CWE-306

TI-2019-02365 CVE-2019-2825 · GHSA-f6vv-vccr-f4q7

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite…

LOW 34

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces).

CVSS 3.0MEDIUM 6.5 Network High privileges No interaction EPSS 0.01367 Published 2019-07-23 No fix listed

TI-2018-02525 CVE-2018-3237 · GHSA-h7mm-8m9w-q2w7

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite…

LOW 34

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02094 Published 2018-10-17 No fix listed

TI-2021-01949 CVE-2021-2275 · GHSA-g5m4-7273-9563

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00968 Published 2021-04-22 No fix listed

TI-2020-11661 CVE-2020-14826 · GHSA-f57j-3gmq-w3hx

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01337 Published 2020-10-21 No fix listed

TI-2020-11646 CVE-2020-14811 · GHSA-mc22-fjwg-jwxx

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP EBS Integration).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01253 Published 2020-10-21 No fix listed

TI-2016-02985 CVE-2016-3525 · GHSA-jq23-76cc-mx8r

Unspecified vulnerability in the Oracle Applications Manager component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.03118 Published 2016-07-21 No fix listed

TI-2021-14308 CVE-2021-35582 · GHSA-mmgp-5x83-hj7m

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 29

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports).

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00503 Published 2021-10-20 No fix listed

TI-2021-14306 CVE-2021-35580 · GHSA-p42c-v34j-q8gq

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 28

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00679 Published 2021-10-20 No fix listed

TI-2025-33057 CVE-2025-53058 · GHSA-rqpv-5c87-6cjx

Improper access control in Oracle Applications Manager

LOW 27

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2025-10-21 No fix listed CWE-284

TI-2021-14296 CVE-2021-35569 · GHSA-46cg-xqr3-9hv2

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 25

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01126 Published 2021-10-20 No fix listed

TI-2017-02477 CVE-2017-3277 · GHSA-jvqh-386g-wm9g

Information disclosure in Oracle Applications Manager

LOW 25

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: OAM Client).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01426 Published 2017-01-27 No fix listed CWE-200

TI-2021-14307 CVE-2021-35581 · GHSA-wvqr-3c8v-765x

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite…

LOW 23

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00723 Published 2021-10-20 No fix listed

TI-2016-00484 CVE-2016-0531 · GHSA-38fw-2f98-cjmf

Unspecified vulnerability in the Oracle Applications Manager component in Oracle…

LOW 21

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Oracle Diagnostics Interfaces.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0123 Published 2016-01-21 No fix listed

Open these records in search →