Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

805 records in Jdk · all components

TI-2016-02888 CVE-2016-3427 · GHSA-php4-mj74-f79r

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77…

CRITICAL 100KEV

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.92334 Published 2016-04-21 Fixed CWE-284

TI-2015-02278 CVE-2015-2590 · GHSA-mhp7-xhx6-9x45

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded…

CRITICAL 100KEV

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.25469 Published 2015-07-16 Fixed

TI-2013-00349 CVE-2013-0422 · GHSA-r293-6mhc-29xx

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to…

CRITICAL 100KEV

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a priva…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9708 Published 2013-01-10 Fixed CWE-284

TI-2012-03989 CVE-2012-4681 · GHSA-fw99-8m5g-58p8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98536 Published 2012-08-28 Partial fix CWE-284

TI-2012-01511 CVE-2012-1723 · GHSA-ch9c-pq9h-jrr9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.93566 Published 2012-06-16 Fixed CWE-284

TI-2011-03122 CVE-2011-3544 · GHSA-25jq-3vh4-pgv4

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96653 Published 2011-10-19 Partial fix CWE-284

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2013-01300 CVE-2013-1493 · GHSA-v3wr-hv3w-x2rj

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update…

CRITICAL 85

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86151 Published 2013-03-04 Fixed CWE-119

TI-2013-01295 CVE-2013-1488 · GHSA-f2f6-qfp8-5hcm

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier…

CRITICAL 85

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "imp…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.87227 Published 2013-03-08 Fixed CWE-94

TI-2012-04282 CVE-2012-5088 · GHSA-4mvh-76x5-57p4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 83

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.78696 Published 2012-10-16 Partial fix

TI-2015-04118 CVE-2015-4902 · GHSA-69xw-2hhx-gvfg

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers…

HIGH 81KEV

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.13603 Published 2015-10-21 Fixed CWE-284

TI-2012-01342 CVE-2012-1533 · GHSA-39xq-q2rq-4395

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 80

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.69037 Published 2012-10-16 Partial fix

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2013-02207 CVE-2013-2460 · GHSA-fmcw-8c9j-mwj4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 77

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.7004 Published 2013-06-18 Fixed

TI-2010-01378 CVE-2010-1423 · GHSA-563f-2v9h-x957

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java…

HIGH 73

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attac…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.5558 Published 2010-04-15 No fix listed CWE-78

TI-2015-03970 CVE-2015-4748 · GHSA-fvmj-2grm-x9mr

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and…

HIGH 70

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.44632 Published 2015-07-16 Fixed

TI-2017-02441 CVE-2017-3241 · GHSA-j64j-5jrj-hggj

Improper input validation in Oracle Java SE

HIGH 66

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.32839 Published 2017-01-27 Fixed CWE-20

TI-2016-00436 CVE-2016-0483 · GHSA-7xjq-3wg8-c44c

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65…

MEDIUM 64

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14714 Published 2016-01-21 Fixed

TI-2015-03381 CVE-2015-4000 · GHSA-v98w-p8f7-9qqf

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server…

MEDIUM 63

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9986 Published 2015-05-21 Partial fix CWE-295

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2015-04063 CVE-2015-4843 · GHSA-5hrw-33cx-6w79

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08934 Published 2015-10-21 Fixed

TI-2013-04978 CVE-2013-5842 · GHSA-vmv2-mj2q-xc6j

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.17606 Published 2013-10-16 Fixed

TI-2016-07970 CVE-2016-9841 · GHSA-5f8r-846v-423w

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified…

MEDIUM 59

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0755 Published 2017-05-23 Fixed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2