Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

16 records in Ilearning · all components

TI-2020-11444 CVE-2020-14595 · GHSA-3hc3-rj8c-gwj9

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment…

MEDIUM 46

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02047 Published 2020-07-15 No fix listed

TI-2022-07499 CVE-2022-23437 · GHSA-h65f-jvqw-m9fj

Infinite loop within Apache XercesJ xml parser

MEDIUM 42

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.11615 Published 2022-01-24 Partial fix · 2.12.2 CWE-835

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2018-02436 CVE-2018-3146 · GHSA-f5mr-9x29-h7w7

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent…

LOW 39

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01542 Published 2018-10-17 No fix listed

TI-2018-02291 CVE-2018-2989 · GHSA-hjvj-538j-c454

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent…

LOW 39

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01498 Published 2018-07-18 No fix listed

TI-2017-07550 CVE-2017-10199 · GHSA-92vj-cr2m-q75p

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent…

LOW 39

Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01929 Published 2017-08-08 No fix listed

TI-2013-04958 CVE-2013-5822 · GHSA-fwm8-q5mh-m75m

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and…

LOW 33

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0122 Published 2013-10-16 No fix listed

TI-2020-13270 CVE-2020-17521 · GHSA-rcjj-h6gh-jf3r

Apache Groovy provides extension methods to aid with creating temporary directories.

LOW 27

Apache Groovy provides extension methods to aid with creating temporary directories.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01027 Published 2020-12-07 Partial fix · 2.4.21, 2.5.14 +1 CWE-379

TI-2014-00369 CVE-2014-0389 · GHSA-3mf8-36h9-jpc6

Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect…

LOW 25

Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02402 Published 2014-01-15 No fix listed

TI-2020-02411 CVE-2020-2709 · GHSA-h4pm-64vv-f6qq

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner…

LOW 24

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01067 Published 2020-01-15 No fix listed

TI-2016-00461 CVE-2016-0508 · GHSA-hg7w-fm6q-3x37

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and…

LOW 23

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01508 Published 2016-01-21 No fix listed

TI-2015-00400 CVE-2015-0436 · GHSA-8863-cpxp-j38r

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and…

LOW 23

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01273 Published 2015-01-21 No fix listed

TI-2013-03288 CVE-2013-3775 · GHSA-2wg8-2p2f-8ccc

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and…

LOW 23

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01351 Published 2013-07-17 No fix listed

TI-2014-05444 CVE-2014-6594 · GHSA-cg7j-9fwf-wwcc

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and…

LOW 22

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01153 Published 2015-01-21 No fix listed

TI-2014-01980 CVE-2014-2471 · GHSA-vm38-24xg-wfpf

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and…

LOW 22

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01036 Published 2014-04-16 No fix listed

TI-2013-04981 CVE-2013-5845 · GHSA-ccxx-c6c6-h846

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and…

LOW 22

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00985 Published 2013-10-16 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2