Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

44 records in Hospitality Simphony · all components

TI-2026-43256 CVE-2026-60591 · GHSA-4hwm-h3wc-xrfj

Missing authentication in Oracle Hospitality Simphony

Priority HIGH 80

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-306
TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

Priority HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79
TI-2018-01190 CVE-2018-1285 · GHSA-2cwj-8chv-9pp9

XML external entity injection in Apache log4net

Priority MEDIUM 59

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17823 Published 2020-05-11 Fixed in 2.0.10 CWE-611
TI-2024-13806 CVE-2024-21014 · GHSA-q3x9-cqxj-2x38

Missing authentication in Oracle Hospitality Simphony

Priority MEDIUM 50

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2024-04-16 No fix listed CWE-306
TI-2026-42869 CVE-2026-60168 · GHSA-45mx-r22v-3pcj

Improper access control in Oracle Hospitality Simphony

Priority MEDIUM 48

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-07-21 No fix listed CWE-284
TI-2024-13802 CVE-2024-21010 · GHSA-jp94-w382-qgwr

Incorrect authorization in Oracle Hospitality Simphony

Priority MEDIUM 44

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00735 Published 2024-04-16 No fix listed CWE-863
TI-2026-43255 CVE-2026-60590 · GHSA-vhrf-w2g7-c2rq

Improper access control in Oracle Hospitality Simphony

Priority LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284
TI-2026-42871 CVE-2026-60170 · GHSA-j5mf-c9m3-5cvr

Improper access control in Oracle Hospitality Simphony

Priority LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284
TI-2026-42868 CVE-2026-60167 · GHSA-m6r4-hh78-25rp

Information disclosure in Oracle Hospitality Simphony

Priority LOW 39

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200
TI-2026-42870 CVE-2026-60169 · GHSA-279h-cv64-q2h5

Missing authentication in Oracle Hospitality Simphony

Priority LOW 37

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306
Load more
Open these records in search →