Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

107 records in Jrockit · all components

TI-2016-02888 CVE-2016-3427 · GHSA-php4-mj74-f79r

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77…

CRITICAL 100KEV

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.92334 Published 2016-04-21 Fixed CWE-284

TI-2011-03134 CVE-2011-3556 · GHSA-x97f-rpv2-wwmc

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

HIGH 72

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.76405 Published 2011-10-19 Partial fix

TI-2015-03970 CVE-2015-4748 · GHSA-fvmj-2grm-x9mr

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and…

HIGH 70

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.44632 Published 2015-07-16 Fixed

TI-2017-02441 CVE-2017-3241 · GHSA-j64j-5jrj-hggj

Improper input validation in Oracle Java SE

HIGH 66

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.32839 Published 2017-01-27 Fixed CWE-20

TI-2016-00436 CVE-2016-0483 · GHSA-7xjq-3wg8-c44c

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65…

MEDIUM 64

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14714 Published 2016-01-21 Fixed

TI-2015-03381 CVE-2015-4000 · GHSA-v98w-p8f7-9qqf

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server…

MEDIUM 63

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9986 Published 2015-05-21 Partial fix CWE-295

TI-2014-05443 CVE-2014-6593 · GHSA-fpfc-8gg5-hw57

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE…

MEDIUM 55

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related t…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.66374 Published 2015-01-21 Fixed

TI-2013-05042 CVE-2013-5907 · GHSA-f4vm-g8q2-m52q

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and…

MEDIUM 54

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unk…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0816 Published 2014-01-15 Partial fix

TI-2014-00408 CVE-2014-0429 · GHSA-6966-vmh9-2rgg

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07418 Published 2014-04-15 Fixed

TI-2013-04966 CVE-2013-5830 · GHSA-xw8h-rxrp-9g5w

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2014-01931 CVE-2014-2421 · GHSA-xpc4-vv94-q5pm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00436 CVE-2014-0457 · GHSA-ph3v-m9mc-6c3f

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00435 CVE-2014-0456 · GHSA-jc53-2whr-8m6w

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2013-04918 CVE-2013-5782 · GHSA-4g8v-h4h8-7w96

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112

TI-2012-02754 CVE-2012-3202 · GHSA-8jhj-qjpj-5fjh

Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion…

MEDIUM 51

Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion Middleware 28.2.4 and earlier, and 27.7.3 and earlier, when using JDK/JRE 5 or 6, allow remote attackers to affect confidentiality, in…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04829 Published 2012-10-17 No fix listed

TI-2011-03123 CVE-2011-3545 · GHSA-66qr-xfmw-w5h7

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remo…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05445 Published 2011-10-19 Partial fix

TI-2018-02439 CVE-2018-3149 · GHSA-8jrq-fr7j-4qx5

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.07156 Published 2018-10-17 Partial fix

TI-2009-00960 CVE-2009-1006 · GHSA-vpxv-7v7p-jxv8

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and…

MEDIUM 48

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity, and availability vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02658 Published 2009-04-15 No fix listed

TI-2018-01952 CVE-2018-2633 · GHSA-v8pc-3hvj-mrwh

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0565 Published 2018-01-18 Partial fix

TI-2017-07698 CVE-2017-10355 · GHSA-c7m6-53c4-386j

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.16181 Published 2017-10-19 Partial fix

TI-2017-07527 CVE-2017-10176 · GHSA-hmv5-wr23-6vf6

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05034 Published 2017-08-08 Partial fix

TI-2013-02127 CVE-2013-2380 · GHSA-h72c-jjw4-vfrm

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware…

MEDIUM 47

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and R28.2.6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02108 Published 2013-04-17 No fix listed

TI-2011-03129 CVE-2011-3551 · GHSA-hf9g-qf2v-h32m

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04549 Published 2011-10-19 Fixed

TI-2018-02473 CVE-2018-3183 · GHSA-7mpf-99c4-7wrr

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 46

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting).

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.02802 Published 2018-10-17 Fixed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2