Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

11 records in Enterpriseone · all components

TI-2006-03611 CVE-2006-3724 · GHSA-qp39-432q-7hv9

Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools…

MEDIUM 50

Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04072 Published 2006-07-19 No fix listed

TI-2006-01832 CVE-2006-1887 · GHSA-g7pr-q92w-4h65

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has…

MEDIUM 50

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04668 Published 2006-04-20 No fix listed

TI-2006-00271 CVE-2006-0281 · GHSA-8xjr-4p39-wfqw

Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has…

MEDIUM 50

Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, as identified by Oracle Vuln# JDE01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04547 Published 2006-01-18 No fix listed

TI-2005-03288 CVE-2005-3465 · GHSA-37rh-7pvh-rmrm

Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld…

MEDIUM 49

Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln# JDE01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03768 Published 2005-11-02 No fix listed

TI-2006-05190 CVE-2006-5378 · GHSA-fxxw-hwrg-h772

Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2…

MEDIUM 44

Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02895 Published 2006-10-18 No fix listed

TI-2008-01756 CVE-2008-1829 · GHSA-89pv-2c3h-7jxh

Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft…

MEDIUM 43

Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02036 Published 2008-04-16 No fix listed

TI-2006-00537 CVE-2006-0552 · GHSA-g6pv-hmfc-v4xj

Unspecified vulnerability in the Net Listener component of Oracle Database server…

MEDIUM 41

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04835 Published 2006-02-04 No fix listed

TI-2007-00286 CVE-2007-0295 · GHSA-wv59-pr47-x66c

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne…

LOW 39

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in PeopleTools, aka PSE01.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02495 Published 2007-01-17 No fix listed

TI-2007-02055 CVE-2007-2134 · GHSA-xcjr-h88g-mrg5

Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1…

LOW 32

Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00417 Published 2007-04-18 No fix listed

TI-2007-00288 CVE-2007-0297 · GHSA-g3cw-c848-p46h

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne…

LOW 25

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03823 Published 2007-01-17 No fix listed

TI-2007-00287 CVE-2007-0296 · GHSA-w637-p98m-m2mf

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne…

LOW 12

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE02.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00527 Published 2007-01-17 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2