Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

14 records in Database 11g · all components

TI-2009-00932 CVE-2009-0978 · GHSA-3rh3-x38g-8fjx

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4…

MEDIUM 42

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerabili…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.16833 Published 2009-04-15 No fix listed

TI-2009-00945 CVE-2009-0991 · GHSA-cfhm-pj55-pf52

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8…

LOW 39

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability th…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.15637 Published 2009-04-15 No fix listed

TI-2009-00939 CVE-2009-0985 · GHSA-hj47-v9v9-c38f

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5…

LOW 36

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availa…

CVSS 2.0HIGH 7.1 Network Low privileges Interaction — EPSS 0.02657 Published 2009-04-15 No fix listed

TI-2009-00929 CVE-2009-0975 · GHSA-fhf8-78f6-2vv8

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4…

LOW 30

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02497 Published 2009-04-15 No fix listed

TI-2009-00946 CVE-2009-0992 · GHSA-hg52-c72h-rv36

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5…

LOW 29

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02068 Published 2009-04-15 No fix listed

TI-2009-00940 CVE-2009-0986 · GHSA-pvph-p9mr-w4w7

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4…

LOW 29

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0MEDIUM 5.4 Network Low privileges Interaction — EPSS 0.02118 Published 2009-04-15 No fix listed

TI-2009-00938 CVE-2009-0984 · GHSA-q6p8-h2mg-649c

Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV…

LOW 29

Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01964 Published 2009-04-15 No fix listed

TI-2009-00934 CVE-2009-0980 · GHSA-6vc2-57mh-2m6r

Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and…

LOW 29

Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02251 Published 2009-04-15 No fix listed

TI-2009-00930 CVE-2009-0976 · GHSA-4wcp-6gh5-j62c

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4…

LOW 29

Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02219 Published 2009-04-15 No fix listed

TI-2009-00935 CVE-2009-0981 · GHSA-pj8x-5x3r-98wr

Unspecified vulnerability in the Application Express component in Oracle Database…

LOW 27

Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.05281 Published 2009-04-15 No fix listed

TI-2008-01742 CVE-2008-1815 · GHSA-5jcx-hp3j-qqqm

Unspecified vulnerability in the Change Data Capture component in Oracle Database…

LOW 27

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01264 Published 2008-04-16 No fix listed

TI-2008-01747 CVE-2008-1820 · GHSA-5qv5-vqj3-hh8c

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8…

LOW 23

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02085 Published 2008-04-16 No fix listed

TI-2009-00942 CVE-2009-0988 · GHSA-42hg-rvmv-77p2

Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6…

LOW 14

Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01214 Published 2009-04-15 No fix listed

TI-2008-03812 CVE-2008-3973 · GHSA-v57v-78f6-6ggv

Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows…

LOW 10

Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors.

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.00327 Published 2009-01-14 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2