Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

34 records in Goldengate · all components

TI-2017-03645 CVE-2017-5645 · GHSA-fxph-q3j8-mv87

Deserialization of untrusted data in Apache Log4j

CRITICAL 91

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.89358 Published 2017-04-17 Partial fix · 2.8.2 CWE-502

TI-2021-02983 CVE-2021-4104 · GHSA-fp5r-v3w9-4333

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

HIGH 73

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.80599 Published 2021-12-14 Partial fix CWE-502

TI-2021-05876 CVE-2021-23017 · GHSA-83p9-mcpm-374v

A security issue in nginx resolver was identified, which might allow an attacker who is…

HIGH 66

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.53461 Published 2021-06-01 Partial fix CWE-193

TI-2018-02217 CVE-2018-2913 · GHSA-xmfw-jv4v-9m93

Out-of-bounds write in Oracle GoldenGate

MEDIUM 56

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.04179 Published 2018-10-17 No fix listed CWE-787

TI-2016-00404 CVE-2016-0451 · GHSA-q7x3-rwv6-2pf6

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2…

MEDIUM 53

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06833 Published 2016-01-21 No fix listed

TI-2016-00405 CVE-2016-0452 · GHSA-39jj-87hq-gv8w

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2…

MEDIUM 52

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05941 Published 2016-01-21 No fix listed

TI-2020-11552 CVE-2020-14705 · GHSA-qx8g-5v5g-5jwf

Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process…

MEDIUM 47

Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management).

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.01864 Published 2020-07-15 Fixed in 19.1.0.0.0

TI-2018-02141 CVE-2018-2832 · GHSA-87hm-fwjc-wg67

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate.

MEDIUM 47

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.01799 Published 2018-04-19 No fix listed

TI-2018-01214 CVE-2018-1311 · GHSA-7rpp-hwhj-9hv8

Use after free in Apache Xerces-C

MEDIUM 47

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.09503 Published 2019-12-18 Partial fix CWE-416

TI-2018-02218 CVE-2018-2914 · GHSA-5w8h-hpxm-mp5f

NULL pointer dereference in Oracle GoldenGate

MEDIUM 45

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03857 Published 2018-10-17 No fix listed CWE-476

TI-2018-02216 CVE-2018-2912 · GHSA-vgpc-pfpm-223h

NULL pointer dereference in Oracle GoldenGate

MEDIUM 45

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03857 Published 2018-10-17 No fix listed CWE-476

TI-2021-02682 CVE-2021-3749 · GHSA-cph5-m8f7-6c5x

Inefficient Regular Expression Complexity in axios/axios

MEDIUM 44

axios is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08515 Published 2021-08-31 Partial fix · 0.21.2 CWE-1333

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2026-43099 CVE-2026-60400 · GHSA-9q5v-q9fp-gvf4

Improper access control in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-43097 CVE-2026-60398 · GHSA-2mxq-qcvh-7g7w

Missing authentication in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306

TI-2026-42858 CVE-2026-60157 · GHSA-7prq-c88h-2c2r

Improper access control in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Service Manager).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2022-05827 CVE-2022-21442 · GHSA-r3c8-pgx2-7735

Vulnerability in Oracle GoldenGate (component: OGG Core Library).

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: OGG Core Library).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0032 Published 2022-04-19 Fixed in 23.1

TI-2026-43750 CVE-2026-61106 · GHSA-29xj-fcrw-cwq5

Improper access control in Oracle GoldenGate

LOW 37

Vulnerability in Oracle GoldenGate (component: Config Service Executable).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-284

TI-2026-43235 CVE-2026-60570 · GHSA-pg38-rgfx-cf4f

Improper access control in Oracle GoldenGate

LOW 35

Vulnerability in Oracle GoldenGate (component: Libraries).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-284

TI-2019-02759 CVE-2019-3740 · GHSA-7mmw-x6rm-hmr8

Cryptographic flaw in Dell RSA BSAFE Crypto-J

LOW 35

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03889 Published 2019-09-18 Fixed in 6.2.5 CWE-310

TI-2026-43095 CVE-2026-60396 · GHSA-qxx2-5vrp-rq3m

Missing authentication in Oracle GoldenGate

LOW 34

Vulnerability in Oracle GoldenGate (component: Distribution Server executable).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-306

TI-2022-05931 CVE-2022-21551 · GHSA-qjrj-cjf4-5r9h

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate).

LOW 34

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate).

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00816 Published 2022-07-19 No fix listed

TI-2019-02758 CVE-2019-3739 · GHSA-p9w8-99j3-73rv

Cryptographic flaw in Dell RSA BSAFE Crypto-J

LOW 34

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0263 Published 2019-09-18 Fixed in 6.2.5 CWE-310

TI-2019-02757 CVE-2019-3738 · GHSA-vq8w-mhc4-p67j

Improper signature verification in Dell RSA BSAFE Crypto-J

LOW 32

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01681 Published 2019-09-18 Fixed in 6.2.5 CWE-325

TI-2019-11066 CVE-2019-14862 · GHSA-vcjj-xf2r-mwvc

Cross-site scripting in Red Hat knockout

LOW 31

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without va…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02053 Published 2020-01-02 Fixed in 3.5.0-beta, 3.5.0 CWE-79

Open these records in search →