Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

67 records in Graalvm For Jdk · all components

TI-2025-31972 CVE-2025-50059 · GHSA-wpm9-mhxc-7hwj

Improper access control in Oracle Java SE

Priority MEDIUM 44

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00615 Published 2025-07-15 Partial fix CWE-284
TI-2024-13745 CVE-2024-20952 · GHSA-343v-9ccv-7535

Improper access control in Oracle Java SE JDK and JRE

Priority MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284
TI-2024-13711 CVE-2024-20918 · GHSA-45pc-2866-5hxx

Improper access control in Oracle Java SE JDK and JRE

Priority MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284
TI-2026-17645 CVE-2026-21945 · GHSA-r2mr-x4h2-9chr

Uncontrolled resource consumption in Oracle Java SE

Priority MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00992 Published 2026-01-20 Partial fix CWE-400
TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

Uncontrolled resource consumption in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400
TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

Information disclosure in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200
TI-2024-13725 CVE-2024-20932 · GHSA-ccwc-jrj7-h4v6

Improper access control in Oracle Java SE JDK and JRE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00775 Published 2024-01-16 Partial fix CWE-284
TI-2026-34665 CVE-2026-47063 · GHSA-vw39-pj36-hc59

Improper access control in Oracle Java SE

Priority LOW 38

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00256 Published 2026-07-21 Partial fix CWE-284
TI-2024-13938 CVE-2024-21147 · GHSA-hw83-24q6-v392

Information disclosure in Oracle Java SE JDK and JRE

Priority LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01127 Published 2024-07-16 Partial fix CWE-200
TI-2025-15547 CVE-2025-21587 · GHSA-7f6c-8chx-2vm5

Improper access control in Oracle Java SE

Priority LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00833 Published 2025-04-15 Partial fix CWE-284
TI-2026-44688 CVE-2026-62574 · GHSA-5cp5-8443-8v7r

Improper access control in Oracle Java SE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-07-21 No fix listed CWE-284
TI-2026-42850 CVE-2026-60147 · GHSA-4pv6-97j8-3pwq

Improper access control in Oracle Java SE

Priority LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00287 Published 2026-07-21 Partial fix CWE-284
TI-2025-33065 CVE-2025-53066 · GHSA-9v5j-pxpg-qprp

Information disclosure in Oracle Java SE

Priority LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00694 Published 2025-10-21 Partial fix CWE-200
TI-2026-34631 CVE-2026-47027 · GHSA-cqfh-fjhw-mr88

Improper access control in Oracle Java SE

Priority LOW 30

Vulnerability in Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284
TI-2026-34626 CVE-2026-47021 · GHSA-qw6j-rcfr-8vrx

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-07-21 Partial fix CWE-400
TI-2026-34523 CVE-2026-46917 · GHSA-x5x7-pvpw-w5hv

Improper access control in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284
TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400
TI-2024-13931 CVE-2024-21140 · GHSA-7prq-r42m-wfcx

Information disclosure in Oracle Java SE JDK and JRE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0094 Published 2024-07-16 Partial fix CWE-200
TI-2024-13719 CVE-2024-20926 · GHSA-hjh6-9v4w-w32w

Improper access control in Oracle Java SE JDK and JRE

Priority LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01035 Published 2024-01-16 Partial fix CWE-284
TI-2024-13714 CVE-2024-20921 · GHSA-hxqj-hr64-7vf7

Incorrect default permissions in Oracle Java SE JDK and JRE

Priority LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00864 Published 2024-02-17 Partial fix CWE-276
Load more
Open these records in search →