Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

132 records in Commerce Guided Search · all components

TI-2022-07125 CVE-2022-22947 · GHSA-3gx9-37ww-9qw6

Code injection in Spring Cloud Gateway

Priority CRITICAL 100KEV

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.98253 Published 2022-03-03 Fixed in 3.0.7, 3.1.1 CWE-94
TI-2020-10912 CVE-2020-13935 · GHSA-m7jv-hq7h-mq7c

Infinite loop in Apache Tomcat

Priority HIGH 81

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.86608 Published 2020-07-14 Partial fix · 10.0.0-M7, 9.0.37 +2 CWE-835
TI-2021-05807 CVE-2021-22946 · GHSA-3cmq-42w4-c529

Cleartext transmission of sensitive information in https://github.com/curl/curl

Priority HIGH 72

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLU…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04539 Published 2021-09-29 Partial fix CWE-325
TI-2021-05808 CVE-2021-22947 · GHSA-94jh-wwgf-cmmc

Cryptographic flaw in https://github.com/curl/curl

Priority MEDIUM 60

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03009 Published 2021-09-29 Partial fix CWE-310
TI-2021-02414 CVE-2021-3450 · GHSA-8hfj-xrj2-pm22

CA certificate check bypass with X509_V_FLAG_X509_STRICT

Priority MEDIUM 58

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.18339 Published 2021-03-25 Fixed in 111.15.0 CWE-295
TI-2019-09264 CVE-2019-12419 · GHSA-cw6w-q88j-6mqf

Incorrect authorization in Apache CXF

Priority MEDIUM 57

Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13836 Published 2019-11-06 Partial fix · 3.2.11, 3.3.4 CWE-863
TI-2021-14540 CVE-2021-36090 · GHSA-mc84-pj99-q6hh

Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

Priority MEDIUM 53

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12945 Published 2021-07-13 Partial fix · 1.21 CWE-130
TI-2021-14251 CVE-2021-35517 · GHSA-xqfj-vm6h-2x34

Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

Priority MEDIUM 52

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10614 Published 2021-07-13 Partial fix · 1.21 CWE-130
TI-2021-17647 CVE-2021-40690 · GHSA-j8wc-gxx9-82hx

Bypass of the secureValidation property

Priority MEDIUM 49

All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference e…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07441 Published 2021-09-19 Partial fix · 2.2.3,2.1.7, 2.2.3 +1 CWE-200
Load more
Open these records in search →