Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

123 records in Mysql Cluster · all components

TI-2021-14316 CVE-2021-35590 · GHSA-6756-7qvc-rg2r

Out-of-bounds write in Oracle MySQL Cluster

Priority HIGH 72

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.88497 Published 2021-10-20 No fix listed CWE-787
TI-2021-05744 CVE-2021-22883 · GHSA-mjgw-69fr-p4h2

Uncontrolled resource consumption in NodeJS Node

Priority HIGH 72

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77385 Published 2021-03-03 Partial fix · 10.24.0, 12.21.0 +2 CWE-400
TI-2021-05792 CVE-2021-22931 · GHSA-7r9p-c88x-w357

Improper input validation in NodeJS Node

Priority HIGH 68

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21952 Published 2021-08-16 Partial fix · 12.22.5, 14.17.5 +1 CWE-170
TI-2020-06694 CVE-2020-8277 · GHSA-m5pg-8h68-j225

Uncontrolled resource consumption in NodeJS Node

Priority HIGH 65

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a D…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.54164 Published 2020-11-19 Fixed in 12.19.1, 14.15.1 +1 CWE-400
TI-2021-14324 CVE-2021-35598 · GHSA-v37v-gr89-xh69

Improper array index validation in Oracle MySQL Cluster

Priority MEDIUM 62

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.51136 Published 2021-10-20 No fix listed CWE-129
TI-2021-14320 CVE-2021-35594 · GHSA-h4m8-wxwg-xpm9

Improper array index validation in Oracle MySQL Cluster

Priority MEDIUM 62

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.51136 Published 2021-10-20 No fix listed CWE-129
TI-2021-14319 CVE-2021-35593 · GHSA-p5cc-3vjx-gp25

Out-of-bounds write in Oracle MySQL Cluster

Priority MEDIUM 62

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.51136 Published 2021-10-20 No fix listed CWE-787
TI-2021-14318 CVE-2021-35592 · GHSA-w452-9q2x-9x8g

Improper array index validation in Oracle MySQL Cluster

Priority MEDIUM 62

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.52491 Published 2021-10-20 No fix listed CWE-129
TI-2022-06195 CVE-2022-21824 · GHSA-39wv-qjgj-4jxg

Prototype pollution in NodeJS Node

Priority MEDIUM 55

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one proper…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.21514 Published 2022-02-24 Partial fix · 12.22.9, 14.18.3 +2 CWE-471
TI-2021-20131 CVE-2021-44531 · GHSA-5qpf-4xwh-5775

Improper certificate validation in NodeJS Node

Priority MEDIUM 43

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.08373 Published 2022-02-24 Partial fix · 12.22.9, 14.18.3 +2 CWE-295
TI-2026-43257 CVE-2026-60592 · GHSA-vmgr-7wgm-jhf8

Improper access control in Oracle MySQL Cluster

Priority MEDIUM 42

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00379 Published 2026-08-18 No fix listed CWE-284
TI-2026-43016 CVE-2026-60315 · GHSA-47wc-32xv-3x4v

Information disclosure in Oracle MySQL Server

Priority MEDIUM 42

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00436 Published 2026-07-21 Fixed CWE-200
TI-2021-20133 CVE-2021-44533

Improper certificate validation in NodeJS Node

Priority MEDIUM 42

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09358 Published 2022-02-24 Partial fix · 12.22.9, 14.18.3 +2 CWE-295
TI-2026-78081 CVE-2026-101781 · GHSA-q6xq-6vm7-7h7j

Improper access control in MySQL Server Group Replication GCS

Priority MEDIUM 40

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00392 Published 2026-10-20 No fix listed CWE-284
TI-2021-05800 CVE-2021-22939 · GHSA-9mvv-4q4j-q2j8

Improper certificate validation in NodeJS Node

Priority MEDIUM 40

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.1473 Published 2021-08-16 Partial fix · 12.22.5, 14.17.5 +1 CWE-295
TI-2026-42864 CVE-2026-60163 · GHSA-r8hj-8qqf-f8wc

Improper access control in Oracle MySQL Server

Priority LOW 38

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00193 Published 2026-07-21 Fixed CWE-284
Load more
Open these records in search →