Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

22 records in Installed Base · all components

TI-2022-05642 CVE-2022-21251 · GHSA-m3q7-jvp5-mr96

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

MEDIUM 41

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01287 Published 2022-01-19 No fix listed

TI-2026-43401 CVE-2026-60738 · GHSA-c63g-67h3-m64v

Improper access control in Oracle Installed Base

MEDIUM 40

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2021-01907 CVE-2021-2231 · GHSA-hx6c-chhh-vgq7

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 39

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00931 Published 2021-04-22 No fix listed

TI-2017-02561 CVE-2017-3361 · GHSA-5vrv-g3g7-6mxm

Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite…

LOW 39

Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User Interface).

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.01554 Published 2017-01-27 No fix listed

TI-2026-44587 CVE-2026-62473 · GHSA-jrgw-w8f8-326v

Information disclosure in Oracle Installed Base

LOW 38

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00387 Published 2026-07-21 No fix listed CWE-200

TI-2026-59514 CVE-2026-87152 · GHSA-v389-6vx5-x2pm

Improper access control in Oracle Installed Base

LOW 37

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-09-15 No fix listed CWE-284

TI-2026-44586 CVE-2026-62472 · GHSA-qfr8-4ffr-w4pj

Improper access control in Oracle Installed Base

LOW 37

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2026-43550 CVE-2026-60904 · GHSA-6jfc-m33v-j93r

Improper access control in Oracle Installed Base

LOW 37

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2026-43554 CVE-2026-60908 · GHSA-wj2c-96w6-5wh7

Improper access control in Oracle Installed Base

LOW 31

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.003 Published 2026-07-21 No fix listed CWE-284

TI-2024-14033 CVE-2024-21258 · GHSA-c2r9-g2wq-7mfp

Insecure storage of sensitive information in Oracle Installed Base

LOW 31

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00498 Published 2024-10-15 No fix listed CWE-922

TI-2026-49470 CVE-2026-70775 · GHSA-j92g-5mw4-mmx5

Improper access control in Oracle Installed Base

LOW 28

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface).

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00262 Published 2026-08-18 No fix listed CWE-284

TI-2024-13727 CVE-2024-20934 · GHSA-93rx-76rw-45hq

Cross-site request forgery in Oracle Installed Base

LOW 28

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00168 Published 2024-01-16 No fix listed CWE-352

TI-2024-13864 CVE-2024-21072 · GHSA-fqfp-8j7w-mhwh

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 27

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2024-04-16 No fix listed

TI-2024-13734 CVE-2024-20941 · GHSA-6968-c3wh-v3mp

Out-of-bounds read in Oracle Installed Base

LOW 27

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00361 Published 2024-02-17 No fix listed CWE-125

TI-2024-13728 CVE-2024-20935 · GHSA-98vr-jfp5-4v4w

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 27

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00361 Published 2024-02-17 No fix listed

TI-2024-13726 CVE-2024-20933 · GHSA-p4c4-q4mg-52qh

Cross-site request forgery in Oracle Installed Base

LOW 26

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00168 Published 2024-02-17 No fix listed CWE-352

TI-2016-02994 CVE-2016-3534 · GHSA-whq6-fvpw-xp94

Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business…

LOW 26

Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineerin…

CVSS 3.0MEDIUM 4.7 Network No auth User interaction EPSS 0.01967 Published 2016-07-21 No fix listed

TI-2024-13751 CVE-2024-20958 · GHSA-m4xp-mrqv-mpqc

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 24

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0034 Published 2024-02-17 No fix listed

TI-2021-01709 CVE-2021-2023 · GHSA-pv77-wcvm-2654

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 24

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01079 Published 2021-01-20 No fix listed

TI-2020-11657 CVE-2020-14822 · GHSA-r8pv-5qcr-8mr8

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 24

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01024 Published 2020-10-21 No fix listed

TI-2019-02546 CVE-2019-3024 · GHSA-h5fw-hj72-8vvq

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component…

LOW 24

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01072 Published 2019-10-16 No fix listed

TI-2026-43553 CVE-2026-60907 · GHSA-699f-c755-h6mq

Improper access control in Oracle Installed Base

LOW 22

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00207 Published 2026-07-21 No fix listed CWE-284

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2