Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

42 records in Hyperion Financial Reporting · all components

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79

TI-2016-02953 CVE-2016-3493 · GHSA-h2p7-j73q-gv3r

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle…

MEDIUM 57

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05437 Published 2016-07-21 No fix listed

TI-2019-00201 CVE-2019-0228 · GHSA-c9jj-3wvg-q65h

XML external entity injection in Apache PDFBox

MEDIUM 54

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09451 Published 2019-04-17 Fixed in 2.0.15 CWE-611

TI-2026-49440 CVE-2026-70745 · GHSA-97pf-j549-hrhv

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 49

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-49435 CVE-2026-70740 · GHSA-4c6c-pcmm-v96x

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 49

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-49434 CVE-2026-70739 · GHSA-fjrr-89gp-9jx2

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 49

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-49436 CVE-2026-70741 · GHSA-25hp-4x4c-h396

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 48

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2018-02212 CVE-2018-2907 · GHSA-5mrq-xgcw-w84j

Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion…

MEDIUM 48

Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models).

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.02675 Published 2018-07-18 No fix listed

TI-2019-13109 CVE-2019-17566 · GHSA-cmx4-p4v5-hmr5

Server-side request forgery in Apache Batik

MEDIUM 46

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10867 Published 2020-11-12 Partial fix · 1.13 CWE-918

TI-2017-07653 CVE-2017-10310 · GHSA-hf3v-hjcm-7jjh

Information disclosure in Oracle Hyperion Financial Reporting

MEDIUM 45

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03201 Published 2017-10-19 No fix listed CWE-200

TI-2026-49482 CVE-2026-70787 · GHSA-53wc-42qx-8585

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 40

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49437 CVE-2026-70742 · GHSA-2276-7gfv-cxfv

Improper access control in Oracle Hyperion Financial Reporting

MEDIUM 40

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49447 CVE-2026-70752 · GHSA-mqj9-p4h9-7c7x

Improper access control in Oracle Hyperion Financial Reporting

LOW 39

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284

TI-2026-49444 CVE-2026-70749 · GHSA-hp73-rg77-95g3

Improper access control in Oracle Hyperion Financial Reporting

LOW 37

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-284

TI-2026-49441 CVE-2026-70746 · GHSA-gghq-2wvc-p6px

Improper access control in Oracle Hyperion Financial Reporting

LOW 37

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00383 Published 2026-08-18 No fix listed CWE-284

TI-2026-49439 CVE-2026-70744 · GHSA-j32p-4v72-w4pf

Improper access control in Oracle Hyperion Financial Reporting

LOW 37

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-284

TI-2026-49483 CVE-2026-70788 · GHSA-2cjc-xvgg-47fq

Improper access control in Oracle Hyperion Financial Reporting

LOW 35

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00272 Published 2026-08-18 No fix listed CWE-284

TI-2026-49445 CVE-2026-70750 · GHSA-qp7m-gv7x-p9xx

Improper access control in Oracle Hyperion Financial Reporting

LOW 35

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-08-18 No fix listed CWE-284

TI-2026-49475 CVE-2026-70780 · GHSA-c7r5-c2xp-9jq4

Improper access control in Oracle Hyperion Financial Reporting

LOW 32

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.00303 Published 2026-08-18 No fix listed CWE-284

TI-2026-49446 CVE-2026-70751 · GHSA-m75x-72q9-6342

Improper access control in Oracle Hyperion Financial Reporting

LOW 32

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00306 Published 2026-08-18 No fix listed CWE-284

TI-2021-09241 CVE-2021-27906 · GHSA-6vqp-h455-42mr

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

LOW 31

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.03337 Published 2021-03-19 Partial fix · 2.0.23 CWE-789

TI-2017-07701 CVE-2017-10358 · GHSA-5ffc-m622-5f67

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion…

LOW 31

Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace).

CVSS 3.0MEDIUM 6.4 Network Low privileges No interaction EPSS 0.01154 Published 2017-10-19 No fix listed

TI-2026-49449 CVE-2026-70754 · GHSA-2mmq-3qgq-fjw5

Improper access control in Oracle Hyperion Financial Reporting

LOW 30

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2026-08-18 No fix listed CWE-284

TI-2021-09195 CVE-2021-27807 · GHSA-2h3j-m7gr-25xj

A carefully crafted PDF file can trigger an infinite loop while loading the file

LOW 30

A carefully crafted PDF file can trigger an infinite loop while loading the file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.02993 Published 2021-03-19 Partial fix · 2.0.23 CWE-834

TI-2026-49464 CVE-2026-70769 · GHSA-8f74-gj86-q6g9

Improper access control in Oracle Hyperion Financial Reporting

LOW 29

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00282 Published 2026-08-18 No fix listed CWE-284

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2