Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

55 records in Identity Manager · all components

TI-2025-38151 CVE-2025-61757 · GHSA-v5gw-cq42-m6w2

Missing authentication in Oracle Identity Manager

Priority CRITICAL 100KEV

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88647 Published 2025-10-21 No fix listed CWE-306
TI-2019-02270 CVE-2019-2729 · GHSA-hmxx-vvw4-43vc

Improper access control in Oracle WebLogic Server

Priority CRITICAL 91

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.8883 Published 2019-06-19 No fix listed CWE-284
TI-2017-11069 CVE-2017-15095 · GHSA-h592-38cm-4ggp

Deserialization of untrusted data in FasterXML jackson-databind

Priority MEDIUM 60

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08357 Published 2018-02-06 Partial fix · 2.8.10, 2.9.1 +4 CWE-184
TI-2026-17691 CVE-2026-21992 · GHSA-hg4m-m77p-qp8j

Missing authentication in Oracle Identity Manager

Priority MEDIUM 51

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01048 Published 2026-03-20 No fix listed CWE-306
TI-2026-57283 CVE-2026-83042 · GHSA-rw23-565h-3q9h

Improper authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-49606 CVE-2026-70913 · GHSA-vf5x-fhrc-c9m8

Improper authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-43840 CVE-2026-61196 · GHSA-fp97-p4jv-99pq

Missing authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-43390 CVE-2026-60727 · GHSA-fxmf-wp23-xfhh

Improper access control in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-43384 CVE-2026-60721 · GHSA-ch3x-g2j3-w7jw

Missing authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-306
TI-2026-43030 CVE-2026-60329 · GHSA-ph5q-62jh-cvqj

Missing authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-34416 CVE-2026-46807 · GHSA-jmx4-f9gg-6jgx

Missing authentication in Oracle Identity Manager

Priority MEDIUM 49

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2026-06-16 No fix listed CWE-306
TI-2026-43841 CVE-2026-61197 · GHSA-8v6r-58q9-5mvf

Improper access control in Oracle Identity Manager

Priority MEDIUM 48

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-284
TI-2026-43232 CVE-2026-60567 · GHSA-3j7p-p25j-434w

Improper privilege management in Oracle Identity Manager

Priority MEDIUM 48

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-269
TI-2026-43710 CVE-2026-61066 · GHSA-m72w-rjqr-r9j4

Improper access control in Oracle Identity Manager

Priority MEDIUM 43

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-43383 CVE-2026-60720 · GHSA-8g9x-6cr9-rrx9

Missing authentication in Oracle Identity Manager

Priority MEDIUM 43

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-306
TI-2026-27442 CVE-2026-35294 · GHSA-q275-cmx9-hghq

Improper access control in Oracle Identity Manager Connector

Priority MEDIUM 43

Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-284
TI-2026-27416 CVE-2026-35268 · GHSA-qf37-7q87-fq5f

Improper access control in Oracle Identity Manager

Priority MEDIUM 43

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00518 Published 2026-06-16 No fix listed CWE-284
Load more
Open these records in search →