Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

30 records in Hospitality Reporting And Analytics · all components

TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87

Deserialization of untrusted data in Apache Commons Beanutils

MEDIUM 61

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.29082 Published 2019-08-20 Partial fix · 1.9.4 CWE-502

TI-2017-07743 CVE-2017-10405 · GHSA-p746-fr6w-mx99

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

MEDIUM 52

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01822 Published 2017-10-19 No fix listed

TI-2017-07740 CVE-2017-10402 · GHSA-h7r2-j348-fjfw

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

MEDIUM 52

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01816 Published 2017-10-19 No fix listed

TI-2015-07630 CVE-2015-9251 · GHSA-rmxg-73gg-4p98

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a…

MEDIUM 51

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.29726 Published 2018-01-18 Partial fix · 1.12.2, 3.0.0 +1 CWE-79

TI-2017-07742 CVE-2017-10404 · GHSA-8fjw-2c8f-ppc2

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

MEDIUM 46

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery).

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01453 Published 2017-10-19 No fix listed

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2018-02418 CVE-2018-3128 · GHSA-c4hp-ccw3-w6q2

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

MEDIUM 41

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01636 Published 2018-10-17 No fix listed

TI-2021-02064 CVE-2021-2395 · GHSA-33rm-2552-8j9v

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: iCare, Configuration).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01405 Published 2021-07-20 No fix listed

TI-2021-01683 CVE-2021-1997 · GHSA-j74q-h94v-g5gh

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01273 Published 2021-01-20 No fix listed

TI-2020-02447 CVE-2020-2746 · GHSA-fwq7-6h2f-3jv9

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01391 Published 2020-04-15 No fix listed

TI-2019-02462 CVE-2019-2937 · GHSA-7vc6-pcp7-6683

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01573 Published 2019-10-16 No fix listed

TI-2019-02459 CVE-2019-2934 · GHSA-3gjh-w777-5rg2

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01366 Published 2019-10-16 No fix listed

TI-2019-01960 CVE-2019-2401 · GHSA-c7cf-jjxx-h7qq

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01602 Published 2019-01-16 No fix listed

TI-2018-02112 CVE-2018-2803 · GHSA-vr3q-7fpf-hm92

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

MEDIUM 40

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01422 Published 2018-04-19 No fix listed

TI-2017-07741 CVE-2017-10403 · GHSA-qj34-j7jc-wmv5

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

LOW 39

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery).

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00994 Published 2017-10-19 No fix listed

TI-2023-08206 CVE-2023-21828 · GHSA-868v-4v5r-xmhh

Improper access control in Oracle Hospitality Reporting and Analytics

LOW 38

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00554 Published 2023-01-17 No fix listed CWE-284

TI-2019-01984 CVE-2019-2425 · GHSA-56mg-6m4f-qrhg

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

LOW 37

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.0117 Published 2019-01-16 No fix listed

TI-2017-07355 CVE-2017-10000 · GHSA-2746-64v7-wvw8

Improper privilege management in Oracle Hospitality Reporting and Analytics

LOW 36

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting).

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.01186 Published 2017-08-08 No fix listed CWE-269

TI-2019-02461 CVE-2019-2936 · GHSA-7p99-584q-vqwm

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food…

LOW 35

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01341 Published 2019-10-16 No fix listed

TI-2023-08204 CVE-2023-21826 · GHSA-h828-gx5m-98h5

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food…

LOW 34

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00526 Published 2023-01-17 No fix listed

TI-2020-11392 CVE-2020-14543 · GHSA-3fvg-pj2g-c428

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food…

LOW 34

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation).

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0046 Published 2020-07-15 No fix listed

TI-2018-01969 CVE-2018-2650 · GHSA-4m83-cj8j-ggcx

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

LOW 33

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00868 Published 2018-01-18 No fix listed

TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79

TI-2017-07452 CVE-2017-10097 · GHSA-m58r-6f5c-7cf4

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

LOW 30

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0147 Published 2017-08-08 No fix listed

TI-2018-01988 CVE-2018-2669 · GHSA-cq25-44h5-v6hh

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle…

LOW 29

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00824 Published 2018-01-18 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2