Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

10 records in Enterprise Asset Management · all components

TI-2026-43355 CVE-2026-60692 · GHSA-8rp4-xx67-hmfv

Improper access control in Oracle Enterprise Asset Management

Priority MEDIUM 40

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284
TI-2026-34537 CVE-2026-46931 · GHSA-v4mq-hqqw-fmw8

Improper access control in Oracle Enterprise Asset Management

Priority MEDIUM 40

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-284
TI-2024-13940 CVE-2024-21149 · GHSA-rg57-w2fr-7hgm

Incorrect authorization in Oracle Enterprise Asset Management

Priority LOW 37

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00388 Published 2024-07-16 No fix listed CWE-863
TI-2026-43940 CVE-2026-61296 · GHSA-cv46-6vvg-mmxm

Improper access control in Oracle Enterprise Asset Management

Priority LOW 33

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0027 Published 2026-08-18 No fix listed CWE-284
TI-2026-34538 CVE-2026-46932 · GHSA-gwv4-hq6g-656m

Improper access control in Oracle Enterprise Asset Management

Priority LOW 31

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0036 Published 2026-06-16 No fix listed CWE-284
TI-2026-43358 CVE-2026-60695 · GHSA-rv86-qq3h-hxfg

Improper access control in Oracle Enterprise Asset Management

Priority LOW 28

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.00325 Published 2026-07-21 No fix listed CWE-284
TI-2026-43357 CVE-2026-60694 · GHSA-894r-q5g8-9q2m

Improper access control in Oracle Enterprise Asset Management

Priority LOW 24

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00208 Published 2026-07-21 No fix listed CWE-284
TI-2026-43253 CVE-2026-60588 · GHSA-g226-9q74-r52h

Improper access control in Oracle Enterprise Asset Management

Priority LOW 24

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00231 Published 2026-07-21 No fix listed CWE-284
TI-2026-43420 CVE-2026-60760 · GHSA-jrj5-7x42-8374

Improper access control in Oracle Enterprise Asset Management

Priority LOW 19

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00189 Published 2026-07-21 No fix listed CWE-284
Open these records in search →