Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

17 records in Internet Directory · all components

TI-2019-00200 CVE-2019-0227 · GHSA-h9gj-rqrw-x4fq

Server-side request forgery in Apache Axis 1.4

HIGH 76

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.9194 Published 2019-05-01 Will not fix CWE-918

TI-2026-57307 CVE-2026-83066 · GHSA-h89f-r8g9-cx4w

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57303 CVE-2026-83062 · GHSA-hc3m-j94p-85jf

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57302 CVE-2026-83061 · GHSA-5hqm-fgh7-8r5j

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57301 CVE-2026-83060 · GHSA-5g93-ggg8-79h5

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57300 CVE-2026-83059 · GHSA-gm73-mp37-g5cv

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57295 CVE-2026-83054 · GHSA-62q3-584q-3xgr

Improper authentication in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-43885 CVE-2026-61241 · GHSA-wxxh-q78p-p5j5

Improper access control in Oracle Internet Directory

MEDIUM 49

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2001-00931 CVE-2001-0975 · GHSA-h349-c8qw-9342

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and…

MEDIUM 44

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08777 Published 2002-02-02 No fix listed

TI-2026-43902 CVE-2026-61258 · GHSA-qxxg-fqfj-q9wf

Improper access control in Oracle Internet Directory

MEDIUM 43

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-43892 CVE-2026-61248 · GHSA-q95j-62m9-976j

Improper access control in Oracle Internet Directory

MEDIUM 43

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2001-01274 CVE-2001-1321 · GHSA-xv3w-jq9v-7wvx

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a…

MEDIUM 42

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated b…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05796 Published 2002-05-03 No fix listed

TI-2001-00930 CVE-2001-0974 · GHSA-qc9w-9p8v-48fv

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and…

MEDIUM 42

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0631 Published 2002-02-02 No fix listed

TI-2018-05809 CVE-2018-8032 · GHSA-96jq-75wh-2658

Cross-site scripting in Apache Axis

MEDIUM 40

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10554 Published 2018-08-02 Will not fix CWE-79

TI-2018-01920 CVE-2018-2601 · GHSA-x362-54fg-p2f4

Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware…

MEDIUM 40

Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (subcomponent: Oracle Directory Services Manager).

CVSS 3.0HIGH 8.0 Network High privileges No interaction EPSS 0.01729 Published 2018-01-18 No fix listed

TI-2000-00977 CVE-2000-0987 · GHSA-f5m7-2587-87mp

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a…

LOW 24

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.01364 Published 2000-11-29 No fix listed

TI-2001-00298 CVE-2001-0300 · GHSA-ppp2-whvv-q4qx

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has…

LOW 12

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00614 Published 2001-04-04 No fix listed

Open these records in search →