Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

32 records in Bea Product Suite · all components

TI-2008-05196 CVE-2008-5457 · GHSA-g2rx-86cx-wmmj

Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and…

HIGH 78

Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to af…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.61309 Published 2009-01-14 No fix listed

TI-2008-03847 CVE-2008-4008 · GHSA-xr79-9mqh-j474

Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA…

HIGH 76

Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7, and 6.1 SP7 allows remote attackers to affect confidentiality, integ…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.56268 Published 2008-10-14 No fix listed

TI-2009-00966 CVE-2009-1012 · GHSA-7g8r-925j-vgfh

Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA…

MEDIUM 50

Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows re…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03922 Published 2009-04-15 No fix listed

TI-2010-00078 CVE-2010-0079 · GHSA-3524-9jx8-82v5

Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using…

MEDIUM 49

Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03148 Published 2010-01-13 No fix listed

TI-2009-03242 CVE-2009-3403 · GHSA-9r76-mhm8-f3q4

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK…

MEDIUM 48

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03063 Published 2009-10-22 No fix listed

TI-2009-00970 CVE-2009-1016 · GHSA-jgc2-582g-w379

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

MEDIUM 41

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availabi…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.02013 Published 2009-04-15 No fix listed

TI-2009-01883 CVE-2009-1975 · GHSA-6m53-9vwf-wfq2

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

LOW 35

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02698 Published 2009-07-14 No fix listed

TI-2009-01882 CVE-2009-1974 · GHSA-mh54-522r-8782

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

LOW 33

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01481 Published 2009-07-14 No fix listed

TI-2008-05200 CVE-2008-5461 · GHSA-qw6f-47p6-c25p

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

LOW 33

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, and availability, rel…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01434 Published 2009-01-14 No fix listed CWE-200

TI-2008-03849 CVE-2008-4010 · GHSA-h75c-9g7p-45jj

Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3…

LOW 33

Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vect…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01434 Published 2008-10-14 No fix listed

TI-2009-00202 CVE-2009-0217 · GHSA-8hfm-837h-hjg5

The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as…

LOW 32

The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06363 Published 2009-07-14 Fixed in 1.4.3

TI-2008-05201 CVE-2008-5462 · GHSA-gmmm-vrfh-pfj9

Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3…

LOW 32

Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vector…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01212 Published 2009-01-14 No fix listed CWE-264

TI-2008-03852 CVE-2008-4013 · GHSA-qgjh-r374-3gfr

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1…

LOW 32

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01212 Published 2008-10-14 No fix listed

TI-2009-00956 CVE-2009-1002 · GHSA-qwf3-mcpp-79x7

Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2…

LOW 29

Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown v…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01485 Published 2009-04-15 No fix listed

TI-2009-00955 CVE-2009-1001 · GHSA-28q8-3hq4-6hmv

Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows…

LOW 28

Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01477 Published 2009-04-15 No fix listed

TI-2010-00077 CVE-2010-0078 · GHSA-5pvv-j5jp-5762

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1…

LOW 27

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0195 Published 2010-01-13 No fix listed

TI-2010-00073 CVE-2010-0074 · GHSA-6q5f-v462-fpjh

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7…

LOW 27

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01972 Published 2010-01-13 No fix listed

TI-2010-00067 CVE-2010-0068 · GHSA-2fq3-p8p7-3cvw

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1…

LOW 27

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02084 Published 2010-01-13 No fix listed

TI-2009-00957 CVE-2009-1003 · GHSA-5g6f-xpmm-cp3m

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

LOW 27

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect integrity via unknown vectors related to "access to source code of w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01861 Published 2009-04-15 No fix listed

TI-2008-02473 CVE-2008-2582 · GHSA-jf4m-m2gq-5qfc

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite…

LOW 27

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02065 Published 2008-07-15 No fix listed

TI-2008-02472 CVE-2008-2581 · GHSA-h7qv-fq97-vx48

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite…

LOW 27

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01748 Published 2008-07-15 No fix listed

TI-2008-03848 CVE-2008-4009 · GHSA-q9c8-qxp9-6jcr

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when…

LOW 26

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authorizers, allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01427 Published 2008-10-14 No fix listed

TI-2008-02471 CVE-2008-2580 · GHSA-mpqf-6fvj-8cgj

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite…

LOW 26

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 has unknown impact and remote attack vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01801 Published 2008-07-15 No fix listed

TI-2008-05198 CVE-2008-5459 · GHSA-g5mr-mh4w-g8q6

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3…

LOW 25

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01307 Published 2009-01-14 No fix listed CWE-264

TI-2009-03238 CVE-2009-3399 · GHSA-x7vj-6hfr-gqfh

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and…

LOW 24

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02079 Published 2009-10-22 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2