Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

68 records in Hyperion Data Relationship Management · all components

TI-2022-07428 CVE-2022-23305 · GHSA-65fg-84f6-3jq3

SQL injection in JDBC Appender in Apache Log4j V1

CRITICAL 85

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66537 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-89

TI-2022-07425 CVE-2022-23302 · GHSA-w9p3-5cr8-m3jj

Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

HIGH 76

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has ac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.63841 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-502

TI-2022-07429 CVE-2022-23307 · GHSA-f7vh-qwp3-x37m

A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

HIGH 73

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.54411 Published 2022-01-18 Partial fix CWE-502

TI-2021-02983 CVE-2021-4104 · GHSA-fp5r-v3w9-4333

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

HIGH 73

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.80599 Published 2021-12-14 Partial fix CWE-502

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20

TI-2026-49573 CVE-2026-70880 · GHSA-x9p7-ppjm-p3cg

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 49

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-49566 CVE-2026-70873 · GHSA-5rjr-493j-jpxv

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 49

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-49564 CVE-2026-70871 · GHSA-hmff-xjjr-q36g

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 49

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-59491 CVE-2026-87129 · GHSA-5r9j-5rhq-g3pq

Improper authentication in Oracle Hyperion Data Relationship Management

MEDIUM 48

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-09-15 No fix listed CWE-287

TI-2026-59490 CVE-2026-87128 · GHSA-crfq-j6xm-jvw7

Improper authentication in Oracle Hyperion Data Relationship Management

MEDIUM 48

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-09-15 No fix listed CWE-287

TI-2026-49577 CVE-2026-70884 · GHSA-53c6-j6g7-3wh8

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 48

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-49576 CVE-2026-70883 · GHSA-49w3-3w9f-g824

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 48

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-49565 CVE-2026-70872 · GHSA-pg76-7mmx-p6m4

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 48

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-49579 CVE-2026-70886 · GHSA-h9cw-529q-wjjp

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 44

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49590 CVE-2026-70897 · GHSA-g5w4-h9xg-w532

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 42

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284

TI-2026-49569 CVE-2026-70876 · GHSA-6vqv-5w76-hm49

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 42

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-08-18 No fix listed CWE-284

TI-2026-49563 CVE-2026-70870 · GHSA-mg24-67qw-6w34

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 42

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00443 Published 2026-08-18 No fix listed CWE-284

TI-2020-06277 CVE-2020-7760 · GHSA-4gw3-8f77-f72c

Regular expression denial of service (ReDoS) in codemirror

MEDIUM 41

This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05304 Published 2020-10-30 Partial fix · 5.58.2 CWE-400

TI-2026-49596 CVE-2026-70903 · GHSA-wv93-3fqw-phgr

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00326 Published 2026-08-18 No fix listed CWE-284

TI-2026-49593 CVE-2026-70900 · GHSA-2rq5-j29g-cw54

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-08-18 No fix listed CWE-284

TI-2026-49592 CVE-2026-70899 · GHSA-962f-j2hp-c9g8

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49575 CVE-2026-70882 · GHSA-g6gh-jg68-qmcv

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00326 Published 2026-08-18 No fix listed CWE-284

TI-2026-49570 CVE-2026-70877 · GHSA-86gw-4ggm-3799

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49567 CVE-2026-70874 · GHSA-689c-p3p7-4fcm

Improper access control in Oracle Hyperion Data Relationship Management

MEDIUM 40

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-59510 CVE-2026-87148 · GHSA-74jw-phhx-w556

Uncontrolled resource consumption in Oracle Hyperion Data Relationship Management

LOW 39

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2026-09-15 No fix listed CWE-400

Open these records in search →