Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

16 records in Common Applications · all components

TI-2017-07673 CVE-2017-10330 · GHSA-334q-pcqf-gvvf

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

MEDIUM 52

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server).

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02531 Published 2017-10-19 No fix listed

TI-2025-21989 CVE-2025-30716 · GHSA-7jvh-56fg-c3rv

Missing authorization in Oracle Common Applications

MEDIUM 40

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00684 Published 2025-04-15 No fix listed CWE-862

TI-2017-07468 CVE-2017-10113 · GHSA-386p-5wvg-5vh6

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01929 Published 2017-08-08 No fix listed

TI-2017-02643 CVE-2017-3443 · GHSA-8gfg-wwpx-qmv8

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01547 Published 2017-01-27 No fix listed

TI-2017-02528 CVE-2017-3328 · GHSA-w6hp-mp6v-hq3f

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01554 Published 2017-01-27 No fix listed

TI-2017-02527 CVE-2017-3327 · GHSA-xchr-v45g-2586

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01804 Published 2017-01-27 No fix listed

TI-2017-02526 CVE-2017-3326 · GHSA-g9mw-xc4x-247x

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01804 Published 2017-01-27 No fix listed

TI-2021-02104 CVE-2021-2436 · GHSA-q7gg-rvc8-jm36

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 38

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01155 Published 2021-07-20 No fix listed

TI-2021-01778 CVE-2021-2093 · GHSA-3vvf-wxxv-ffqp

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 38

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01184 Published 2021-01-20 No fix listed

TI-2020-11536 CVE-2020-14688 · GHSA-3gg6-9p4q-x3pp

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 38

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01256 Published 2020-07-15 No fix listed

TI-2019-02215 CVE-2019-2665 · GHSA-3qqm-2wjh-qxhf

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite…

LOW 38

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01287 Published 2019-04-23 No fix listed

TI-2016-04841 CVE-2016-5575 · GHSA-6c94-7r2g-8gm7

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle…

LOW 34

Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors rela…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01843 Published 2016-10-25 No fix listed CWE-200

TI-2024-13740 CVE-2024-20947 · GHSA-64mq-mqgg-8qrq

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 24

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00308 Published 2024-02-17 No fix listed

TI-2020-11564 CVE-2020-14717 · GHSA-7prc-v6jr-7frc

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 24

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01024 Published 2020-07-15 No fix listed

TI-2020-11563 CVE-2020-14716 · GHSA-v8pj-w2gf-97p5

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite…

LOW 24

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00985 Published 2020-07-15 No fix listed

TI-2016-00515 CVE-2016-0562 · GHSA-8pw2-rm4q-6q47

Unspecified vulnerability in the Oracle Common Applications component in Oracle…

LOW 21

Unspecified vulnerability in the Oracle Common Applications component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via vectors related to CRM User…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0123 Published 2016-01-21 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2