Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

30 records in Enterprise Manager Database Control · all components

TI-2004-01240 CVE-2004-1363 · GHSA-v25x-3wqw-87r9

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary…

MEDIUM 54

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09095 Published 2005-01-19 No fix listed CWE-131

TI-2004-01248 CVE-2004-1371 · GHSA-v4v5-xmrp-3656

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute…

MEDIUM 52

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.10767 Published 2005-01-19 No fix listed CWE-119

TI-2004-01241 CVE-2004-1364 · GHSA-rx5m-vvp9-4xw5

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers…

MEDIUM 52

Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.13892 Published 2005-01-19 No fix listed CWE-22

TI-2004-01239 CVE-2004-1362 · GHSA-7qjg-gh78-xg4v

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using…

MEDIUM 44

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access re…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0905 Published 2005-01-19 No fix listed

TI-2004-01245 CVE-2004-1368 · GHSA-5q2v-98f2-hvgp

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary…

MEDIUM 43

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.05556 Published 2005-01-19 No fix listed

TI-2004-01247 CVE-2004-1370 · GHSA-wcpw-pcq8-4pwf

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights…

LOW 39

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03856 Published 2005-01-19 No fix listed

TI-2004-01243 CVE-2004-1366 · GHSA-3242-g4f6-mjm3

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the…

LOW 37

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.15495 Published 2005-01-19 No fix listed CWE-255

TI-2004-01246 CVE-2004-1369 · GHSA-3gfx-cq94-vpjw

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service…

LOW 31

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0564 Published 2005-01-19 No fix listed

TI-2004-01244 CVE-2004-1367 · GHSA-mxr8-54m4-297v

Oracle 10g Database Server, when installed with a password that contains an exclamation…

LOW 31

Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.lo…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.07275 Published 2005-01-19 No fix listed CWE-200

TI-2004-01242 CVE-2004-1365 · GHSA-c547-5m3r-v2p8

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute…

LOW 31

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.07362 Published 2005-01-19 No fix listed

TI-2015-03957 CVE-2015-4735 · GHSA-c3mp-xm82-4vr9

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in…

LOW 28

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02768 Published 2015-07-16 No fix listed CWE-200

TI-2015-02335 CVE-2015-2647 · GHSA-xwxw-ph5c-h3rg

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in…

LOW 28

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01704 Published 2015-07-16 No fix listed

TI-2015-02334 CVE-2015-2646 · GHSA-rgvc-cf9g-ch6w

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in…

LOW 24

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01943 Published 2015-07-16 No fix listed

TI-2013-00300 CVE-2013-0372 · GHSA-hmrj-c8mx-hq45

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 24

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01895 Published 2013-01-17 No fix listed

TI-2013-03304 CVE-2013-3791 · GHSA-c6v8-h677-3vr4

Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB…

LOW 23

Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01395 Published 2013-07-17 No fix listed

TI-2013-00282 CVE-2013-0354 · GHSA-8v8j-pm6c-3w36

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 23

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01228 Published 2013-01-17 No fix listed

TI-2013-00280 CVE-2013-0352 · GHSA-mj8q-jf3m-vvxf

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 23

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01228 Published 2013-01-17 No fix listed

TI-2012-02771 CVE-2012-3219 · GHSA-9v54-vvx3-m36p

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 23

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01228 Published 2013-01-17 No fix listed

TI-2013-04964 CVE-2013-5828 · GHSA-fm44-4gf5-f37x

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-10-16 No fix listed

TI-2013-04963 CVE-2013-5827 · GHSA-j5gc-8mc6-4g4g

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-10-16 No fix listed

TI-2013-04902 CVE-2013-5766 · GHSA-q433-xg7f-phjh

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-10-16 No fix listed

TI-2013-03275 CVE-2013-3762 · GHSA-56jh-qcpc-qxpv

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-10-16 No fix listed

TI-2013-03271 CVE-2013-3758 · GHSA-35q6-95hx-g7w3

Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and…

LOW 22

Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01215 Published 2013-07-17 No fix listed

TI-2013-00302 CVE-2013-0374 · GHSA-f4qx-gx53-3hr4

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-01-17 No fix listed

TI-2013-00301 CVE-2013-0373 · GHSA-5363-6p5p-7cm2

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle…

LOW 22

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-01-17 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2