Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

18 records in Jd Edwards Products · all components

TI-2016-00373 CVE-2016-0420 · GHSA-3jq5-fgc4-p983

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

MEDIUM 40

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03413 Published 2016-01-21 No fix listed

TI-2016-00376 CVE-2016-0423 · GHSA-9fgh-h5vc-r66c

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 38

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to En…

CVSS 2.0HIGH 7.3 Network No auth Interaction — EPSS 0.03338 Published 2016-01-21 No fix listed

TI-2016-00377 CVE-2016-0424 · GHSA-j545-m7pf-mcrp

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 37

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a d…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02941 Published 2016-01-21 No fix listed

TI-2016-00375 CVE-2016-0422 · GHSA-9374-rv92-w45c

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 37

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02941 Published 2016-01-21 No fix listed

TI-2015-04134 CVE-2015-4919 · GHSA-8rfm-r3fx-cm8w

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 34

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01846 Published 2016-01-21 No fix listed

TI-2016-00378 CVE-2016-0425 · GHSA-m629-fm3x-995w

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 31

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01991 Published 2016-01-21 No fix listed

TI-2016-00374 CVE-2016-0421 · GHSA-q3g4-j76w-7w45

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD…

LOW 28

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.029 Published 2016-01-21 No fix listed

TI-2011-02031 CVE-2011-2324 · GHSA-f37c-qmx2-jfjh

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98…

LOW 25

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC (JDENET).

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01163 Published 2012-01-18 No fix listed

TI-2015-00437 CVE-2015-0475 · GHSA-xf49-x3pq-cfv4

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle…

LOW 22

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Secu…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01412 Published 2015-04-16 No fix listed

TI-2011-03103 CVE-2011-3524 · GHSA-gq7h-jmc7-48xr

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98…

LOW 21

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different v…