Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

39 records in Business Intelligence Publisher · all components

TI-2019-02166 CVE-2019-2616 · GHSA-8j2r-c64f-x52g

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…

CRITICAL 89KEV

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.92183 Published 2019-04-23 No fix listed

TI-2019-02138 CVE-2019-2588 · GHSA-3wwx-c927-c5wg

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…

MEDIUM 49

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.36537 Published 2019-04-23 No fix listed

TI-2016-02933 CVE-2016-3473 · GHSA-4xpm-jj66-x7r5

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in…

MEDIUM 49

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown…

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.13948 Published 2016-10-25 No fix listed CWE-200

TI-2014-02900 CVE-2014-3576 · GHSA-3wfj-vh84-732p

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ…

MEDIUM 47

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12794 Published 2015-08-14 Fixed in 5.11.0 CWE-264

TI-2018-02261 CVE-2018-2958 · GHSA-c5rr-8h76-8jgp

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI…

MEDIUM 46

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.02067 Published 2018-07-18 No fix listed

TI-2018-02205 CVE-2018-2900 · GHSA-grp6-3xc5-qp6x

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent…

MEDIUM 46

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.02025 Published 2018-07-18 No fix listed

TI-2017-07380 CVE-2017-10025 · GHSA-r7gg-8cmq-w5j6

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI…

MEDIUM 46

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.02119 Published 2017-08-08 No fix listed

TI-2017-07392 CVE-2017-10037 · GHSA-pr2r-pf6p-36jw

Information disclosure in Oracle BI Publisher

MEDIUM 44

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02603 Published 2017-10-19 No fix listed CWE-200

TI-2020-11543 CVE-2020-14696 · GHSA-22rf-57mq-wq43

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component…

MEDIUM 40

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates).

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01218 Published 2020-07-15 No fix listed

TI-2019-02283 CVE-2019-2742 · GHSA-wcpj-82pc-ww8v

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware…

MEDIUM 40

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).

CVSS 3.0HIGH 7.2 Network No auth No interaction EPSS 0.01085 Published 2019-07-23 No fix listed

TI-2017-07389 CVE-2017-10034 · GHSA-6xjm-5mjj-p26x

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware…

MEDIUM 40

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01989 Published 2017-10-19 No fix listed

TI-2020-11715 CVE-2020-14880 · GHSA-3fq7-hx4j-7hh8

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component…

LOW 39

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01298 Published 2020-10-21 No fix listed

TI-2020-11714 CVE-2020-14879 · GHSA-pvwm-jpjj-2g7v

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component…

LOW 39

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01298 Published 2020-10-21 No fix listed

TI-2020-11677 CVE-2020-14842 · GHSA-fvf7-5f57-573h

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI…

LOW 39

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01432 Published 2020-10-21 No fix listed

TI-2020-11619 CVE-2020-14784 · GHSA-vp86-33r7-9226

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component…

LOW 39

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01432 Published 2020-10-21 No fix listed

TI-2019-02439 CVE-2019-2906 · GHSA-86xc-qfwv-3g73

Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion…

LOW 39

Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01661 Published 2019-10-16 No fix listed

TI-2017-07507 CVE-2017-10156 · GHSA-q3qh-grhq-w6j8

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI…

LOW 39

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).