Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

21 records in Integrated Lights Out Manager Firmware · all components

TI-2013-02271 CVE-2013-2566 · GHSA-f67x-vqh9-8p43

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte…

HIGH 68

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a l…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.84424 Published 2013-03-14 Will not fix CWE-327

TI-2015-02479 CVE-2015-2808 · GHSA-jcj6-c96p-jcmm

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly…

MEDIUM 56

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recover…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.73851 Published 2015-04-01 Partial fix CWE-327

TI-2016-04727 CVE-2016-5453 · GHSA-c7qj-4jp6-rp62

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 55

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to IPMI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03591 Published 2016-07-21 No fix listed

TI-2015-02826 CVE-2015-3195 · GHSA-7q2f-v729-wjf3

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh…

MEDIUM 51

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.38709 Published 2015-12-06 Partial fix CWE-200

TI-2016-04731 CVE-2016-5457 · GHSA-859c-hqqw-76hx

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 47

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to LUMAI…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04114 Published 2016-07-21 No fix listed

TI-2016-04719 CVE-2016-5445 · GHSA-56h8-m45q-394g

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 47

CVSS 3.0HIGH 8.3 Network No auth No interaction EPSS 0.02491 Published 2016-07-21 No fix listed

TI-2016-04723 CVE-2016-5449 · GHSA-pmf4-gw3f-q4m3

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 45

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect availability via vectors related to Console Redirection.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03275 Published 2016-07-21 No fix listed

TI-2017-07611 CVE-2017-10260 · GHSA-cp47-gcrh-fx43

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun…

MEDIUM 43

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01881 Published 2017-10-19 Fixed in 3.2.6

TI-2016-04720 CVE-2016-5446 · GHSA-6cmw-h57c-4q2x

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 43

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.02491 Published 2016-07-21 No fix listed

TI-2018-01887 CVE-2018-2568 · GHSA-m4r5-cr22-679m

Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems…

MEDIUM 41

Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01392 Published 2018-01-18 No fix listed

TI-2017-07616 CVE-2017-10265 · GHSA-37j2-87p9-cj66

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun…

MEDIUM 41

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management).

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.01248 Published 2017-10-19 Fixed in 3.2.6

TI-2016-04722 CVE-2016-5448 · GHSA-7g8x-w387-xwxc

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

MEDIUM 40

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity and availability via vectors related to SNMP.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.02603 Published 2016-07-21 No fix listed

TI-2018-01885 CVE-2018-2566 · GHSA-mxp2-5233-73gr

Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems…

LOW 39

Vulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: Remote Console Application).

CVSS 3.0HIGH 7.7 Network Low privileges User interaction EPSS 0.01492 Published 2018-01-18 No fix listed

TI-2016-03045 CVE-2016-3585 · GHSA-2mcq-8fh6-cjj4

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

LOW 39

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality and integrity via vectors related to Emulex.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.0247 Published 2016-07-21 No fix listed

TI-2016-04721 CVE-2016-5447 · GHSA-3c55-h885-645p

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

LOW 38

CVSS 3.0HIGH 7.6 Network Low privileges No interaction EPSS 0.02194 Published 2016-07-21 No fix listed

TI-2016-02941 CVE-2016-3481 · GHSA-w3wf-5496-hfh3

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

LOW 38

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote authenticated users to affect availability via vectors related to Web.

CVSS 3.0HIGH 7.7 Network Low privileges No interaction EPSS 0.02516 Published 2016-07-21 No fix listed

TI-2015-00388 CVE-2015-0424 · GHSA-cxhv-p73h-f86r

Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle…

LOW 35

Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to affect confidentiality, integrity, and availab…

CVSS 2.0HIGH 7.5 Network Low privileges Interaction — EPSS 0.01264 Published 2015-01-21 No fix listed

TI-2016-02911 CVE-2016-3451 · GHSA-26pp-wmv6-ph7r

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0…

LOW 25

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity via vectors related to Web.

CVSS 3.0MEDIUM 4.7 Network No auth User interaction EPSS 0.01918 Published 2016-07-21 No fix listed

TI-2024-13699 CVE-2024-20906 · GHSA-jj54-m9rr-8gjf

Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems…

LOW 22

Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2024-01-16 No fix listed

TI-2014-05434 CVE-2014-6584 · GHSA-8xww-j655-r7f4

Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle…

LOW 21

Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM before 3.2.4 allows remote authenticated users to affect confidentiality via unknown vectors relat…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00957 Published 2015-01-21 No fix listed

TI-2017-07545 CVE-2017-10194 · GHSA-ff25-28p3-2296

Information disclosure in Oracle SSM - ILOM: Integrated Lights Out Manager

LOW 16

Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management).

CVSS 3.0LOW 2.7 Network High privileges No interaction EPSS 0.00968 Published 2017-10-19 Fixed in 3.2.6 CWE-200

Open these records in search →