Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

40 records in Glassfish Server · all components

TI-2017-14374 CVE-2017-1000028 · GHSA-w76g-qg26-9xhh

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and…

HIGH 78

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.99479 Published 2017-07-13 No fix listed CWE-22

TI-2011-00707 CVE-2011-0807 · GHSA-v6gw-xw3f-59f9

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and…

HIGH 77

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via un…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.60878 Published 2011-04-20 No fix listed

TI-2011-04312 CVE-2011-5035 · GHSA-6mxv-54wx-wppj

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java…

MEDIUM 60

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting th…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.68155 Published 2011-12-30 Fixed CWE-20

TI-2016-03060 CVE-2016-3607 · GHSA-87h2-rf3x-8j4w

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

MEDIUM 59

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Con…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07493 Published 2016-07-21 No fix listed

TI-2015-05957 CVE-2015-7182 · GHSA-f3ww-87xf-9498

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services…

MEDIUM 55

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, all…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10238 Published 2015-11-05 Partial fix CWE-119

TI-2018-10268 CVE-2018-14324 · GHSA-q577-wwww-c57j

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by…

MEDIUM 49

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04288 Published 2018-07-16 No fix listed CWE-798

TI-2017-14376 CVE-2017-1000030 · GHSA-8xjw-wvq4-r67r

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key…

MEDIUM 45

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of admini…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.017 Published 2017-07-13 No fix listed CWE-287

TI-2016-04787 CVE-2016-5519 · GHSA-v25m-3qjp-g29c

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

MEDIUM 45

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02332 Published 2016-10-25 No fix listed

TI-2016-01784 CVE-2016-1950 · GHSA-8cv9-944x-284m

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and…

MEDIUM 45

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04192 Published 2016-03-13 Fixed CWE-119

TI-2017-14375 CVE-2017-1000029 · GHSA-5p9x-gqr6-hr64

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File…

MEDIUM 44

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited with…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08348 Published 2017-07-13 No fix listed CWE-200

TI-2016-04795 CVE-2016-5528 · GHSA-2v59-gf35-6hpx

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 44

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.0175 Published 2017-01-27 No fix listed

TI-2018-02442 CVE-2018-3152 · GHSA-jrxq-3hv4-q4v2

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 43

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02025 Published 2018-10-17 No fix listed

TI-2018-02215 CVE-2018-2911 · GHSA-8gr7-xgqp-g6fh

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 42

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.01902 Published 2018-10-17 No fix listed

TI-2017-07729 CVE-2017-10391 · GHSA-hq8p-vxqf-q3mx

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01515 Published 2017-10-19 No fix listed

TI-2017-02450 CVE-2017-3250 · GHSA-948w-pgmc-vcxp

Information disclosure in Oracle GlassFish Server

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01265 Published 2017-01-27 No fix listed CWE-200

TI-2017-02449 CVE-2017-3249 · GHSA-6hjp-gc44-j7vr

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

MEDIUM 41

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01376 Published 2017-01-27 No fix listed

TI-2012-00498 CVE-2012-0550 · GHSA-f82c-h7j4-72fj

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun…

MEDIUM 40

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unk…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.06899 Published 2012-05-03 No fix listed

TI-2011-03137 CVE-2011-3559 · GHSA-vvwv-hcqf-p6jp

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise…

MEDIUM 40

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown ve…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0314 Published 2011-10-18 No fix listed

TI-2015-02866 CVE-2015-3237 · GHSA-c5fx-333r-cgw4

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote…

LOW 39

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted lengt…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.08302 Published 2015-06-22 No fix listed CWE-20

TI-2012-00499 CVE-2012-0551 · GHSA-mc32-mvw8-hcj8

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish E…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.11388 Published 2012-05-03 Fixed

TI-2016-04751 CVE-2016-5477 · GHSA-p85p-58vv-9vmw

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 37

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02353 Published 2016-07-21 No fix listed

TI-2016-03061 CVE-2016-3608 · GHSA-f94p-93rc-f9cj

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion…

LOW 37

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02353 Published 2016-07-21 No fix listed

TI-2018-02499 CVE-2018-3210 · GHSA-x3j8-7w5w-f8m2

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 33

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01657 Published 2018-10-17 No fix listed

TI-2009-01471 CVE-2009-1553 · GHSA-54q2-f3hp-xggh

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish…

LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/appli…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08199 Published 2009-05-06 No fix listed CWE-79

TI-2017-07731 CVE-2017-10393 · GHSA-m8hm-vgf9-wh52

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware…

LOW 30

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container).

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.0121 Published 2017-10-19 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2