Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

25 records in Database 9i · all components

TI-2008-03823 CVE-2008-3984 · GHSA-78mj-jxw8-78gg

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8…

MEDIUM 53

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to S…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.4181 Published 2008-10-14 No fix listed

TI-2008-03822 CVE-2008-3983 · GHSA-g85g-p29m-3jgf

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8…

MEDIUM 53

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.4181 Published 2008-10-14 No fix listed

TI-2008-01739 CVE-2008-1812 · GHSA-r92g-hrvw-hhwv

Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database…

MEDIUM 47

Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has unknown impact and local a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02131 Published 2008-04-16 No fix listed

TI-2009-00933 CVE-2009-0979 · GHSA-j4wv-6pq2-c7hw

Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8…

MEDIUM 43

Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02153 Published 2009-04-15 No fix listed

TI-2008-01744 CVE-2008-1817 · GHSA-w774-4mjh-hp8m

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8…

MEDIUM 42

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, a…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01707 Published 2008-04-16 No fix listed

TI-2009-00945 CVE-2009-0991 · GHSA-cfhm-pj55-pf52

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8…

LOW 39

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability th…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.15637 Published 2009-04-15 No fix listed

TI-2008-03821 CVE-2008-3982 · GHSA-ch44-mjv9-gpxr

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8…

LOW 38

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.1143 Published 2008-10-14 No fix listed

TI-2008-02485 CVE-2008-2595 · GHSA-rwwf-h3vf-px76

Unspecified vulnerability in the Oracle Internet Directory component in Oracle…

LOW 36

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11336 Published 2008-07-15 No fix listed

TI-2008-02497 CVE-2008-2607 · GHSA-hjq3-j9hq-m46w

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8…

LOW 35

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03357 Published 2008-07-15 No fix listed

TI-2008-02481 CVE-2008-2591 · GHSA-58vc-cr4x-qvjg

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database…

LOW 32

Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0137 Published 2008-07-15 No fix listed

TI-2008-01746 CVE-2008-1819 · GHSA-f7hf-98mg-4rpp

Unspecified vulnerability in the Oracle Net Services component in Oracle Database…

LOW 32

Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00426 Published 2008-04-16 No fix listed

TI-2008-01740 CVE-2008-1813 · GHSA-2h92-3vq6-5h3x

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8…

LOW 32

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01588 Published 2008-04-16 No fix listed

TI-2009-00938 CVE-2009-0984 · GHSA-q6p8-h2mg-649c

Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV…

LOW 29

Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01964 Published 2009-04-15 No fix listed

TI-2009-00931 CVE-2009-0977 · GHSA-5367-pj7f-p2xr

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8…

LOW 29

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02023 Published 2009-04-15 No fix listed

TI-2008-05176 CVE-2008-5436 · GHSA-r5g2-w963-3x99

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8…

LOW 29

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01975 Published 2009-01-14 No fix listed

TI-2008-05177 CVE-2008-5437 · GHSA-4wh7-3w2p-8mgh

Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8…

LOW 28

Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01738 Published 2009-01-14 No fix listed

TI-2008-03815 CVE-2008-3976 · GHSA-fg84-7476-jjh7

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8…

LOW 28

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a dif…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01761 Published 2008-10-14 No fix listed

TI-2008-03833 CVE-2008-3994 · GHSA-pq3q-fh9q-52h6

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8…

LOW 27

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01018 Published 2008-10-14 No fix listed

TI-2008-03838 CVE-2008-3999 · GHSA-gpqj-cp2v-g673

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8…

LOW 23

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0199 Published 2009-01-14 No fix listed

TI-2008-02515 CVE-2008-2625 · GHSA-6826-c5xm-mv7f

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8…

LOW 23

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02066 Published 2008-10-14 No fix listed

TI-2008-01747 CVE-2008-1820 · GHSA-5qv5-vqj3-hh8c

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8…

LOW 23

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02085 Published 2008-04-16 No fix listed

TI-2008-03830 CVE-2008-3991 · GHSA-5x69-q27x-jmpr

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08…

LOW 22

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vuln…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01446 Published 2008-10-14 No fix listed

TI-2008-03813 CVE-2008-3974 · GHSA-vhr7-g32f-rrqx

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and…

LOW 22

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0135 Published 2009-01-14 No fix listed

TI-2008-03829 CVE-2008-3990 · GHSA-4jhm-crx9-7qmm

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08…

LOW 21

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01176 Published 2008-10-14 No fix listed

TI-2008-02477 CVE-2008-2587 · GHSA-rjp8-mccm-2x7q

Unspecified vulnerability in the Advanced Replication component in Oracle Database…

LOW 9

Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.

CVSS 2.0LOW 1.5 Local Low privileges Interaction — EPSS 0.00316 Published 2008-07-15 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2