Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

21 records in Industry Applications · all components

TI-2010-03422 CVE-2010-3593 · GHSA-9qg7-2pr2-fwxx

Unspecified vulnerability in the Health Sciences - Oracle Argus Safety component in…

LOW 38

Unspecified vulnerability in the Health Sciences - Oracle Argus Safety component in Oracle Industry Applications 5.0, 5.0.1, 5.0.2, and 5.0.3 allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02542 Published 2011-01-19 No fix listed

TI-2015-04017 CVE-2015-4795 · GHSA-cxfh-rf3h-4mpp

Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in…

LOW 37

Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02044 Published 2015-10-21 No fix listed

TI-2012-04260 CVE-2012-5066 · GHSA-9c4x-4jcc-893q

Unspecified vulnerability in the Oracle Central Designer component in Oracle Industry…

LOW 33

Unspecified vulnerability in the Oracle Central Designer component in Oracle Industry Applications 1.3, 1.4, and 1.4.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01356 Published 2012-10-17 No fix listed

TI-2013-03327 CVE-2013-3814 · GHSA-53qj-5pxm-qjcc

Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle…

LOW 27

Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality a…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.00961 Published 2013-10-16 No fix listed

TI-2013-02144 CVE-2013-2397 · GHSA-2grc-9vqr-3q7x

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle…

LOW 27

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vec…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.0095 Published 2013-04-17 No fix listed

TI-2013-01327 CVE-2013-1520 · GHSA-pfw4-46c7-68rm

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in…

LOW 27

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.0095 Published 2013-04-17 No fix listed

TI-2011-00754 CVE-2011-0855 · GHSA-6h3m-6wwm-9ww4

Unspecified vulnerability in the InForm component in Oracle Industry Applications 4.5…

LOW 27

Unspecified vulnerability in the InForm component in Oracle Industry Applications 4.5, 4.6, and 5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Core.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01262 Published 2011-04-20 No fix listed

TI-2009-01906 CVE-2009-1998 · GHSA-mg86-2vf3-5mjq

Unspecified vulnerability in the Oracle Communications Order and Service Management…

LOW 26

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01618 Published 2009-10-22 No fix listed

TI-2012-00530 CVE-2012-0582 · GHSA-f4vw-xggv-g8pf

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry…

LOW 23

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02132 Published 2012-05-03 No fix listed

TI-2011-02030 CVE-2011-2323 · GHSA-7jf4-hqxq-r46x

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System…

LOW 23

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01334 Published 2011-10-18 No fix listed

TI-2011-02016 CVE-2011-2309 · GHSA-85h5-mrxm-8p7r

Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture…

LOW 23

Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01334 Published 2011-10-18 No fix listed

TI-2013-03328 CVE-2013-3816 · GHSA-6v64-jx4v-8h87

Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry…

LOW 21

Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unkno…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01113 Published 2013-07-17 No fix listed

TI-2013-01332 CVE-2013-1525 · GHSA-mcvq-633r-c4m8

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle…

LOW 21

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Ret…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00957 Published 2013-04-17 No fix listed

TI-2012-01551 CVE-2012-1763 · GHSA-fv3v-3fmq-28pc

Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle…

LOW 21

Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to HTML Surround.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01136 Published 2012-10-16 No fix listed

TI-2012-01462 CVE-2012-1674 · GHSA-7h43-xjcm-mf6f

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry…

LOW 21

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01093 Published 2012-05-03 No fix listed

TI-2013-04993 CVE-2013-5857 · GHSA-28mj-w386-78gm

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle…

LOW 19

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, and…

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.00967 Published 2013-10-16 No fix listed

TI-2013-04992 CVE-2013-5856 · GHSA-r5g3-vrcw-3q36

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle…

LOW 19

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.00967 Published 2013-10-16 No fix listed

TI-2013-04947 CVE-2013-5811 · GHSA-h88v-hhh6-g4p8

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle…

LOW 19

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0088 Published 2013-10-16 No fix listed

TI-2012-01531 CVE-2012-1743 · GHSA-jpfx-8w27-cwrp

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in…

LOW 16

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML…

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.0113 Published 2012-07-17 No fix listed

TI-2013-04973 CVE-2013-5837 · GHSA-h63v-v8j5-f273

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle…

LOW 13

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.00812 Published 2013-10-16 No fix listed

TI-2013-04898 CVE-2013-5762 · GHSA-98gr-3854-g829

Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry…

LOW 12

Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration.

CVSS 2.0LOW 2.4 Local Low privileges Interaction — EPSS 0.00253 Published 2013-10-16 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2