Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

15 records in Peoplesoft Enterprise Pt Peopletools · all components

TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87

Deserialization of untrusted data in Apache Commons Beanutils

MEDIUM 61

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.29082 Published 2019-08-20 Partial fix · 1.9.4 CWE-502

TI-2017-13794 CVE-2017-18640 · GHSA-rvwf-54qp-4r6v

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load…

MEDIUM 55

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26723 Published 2019-12-12 Partial fix · 1.26 CWE-776

TI-2026-27426 CVE-2026-35278 · GHSA-j52w-q68f-h7f9

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 50

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00644 Published 2026-06-16 No fix listed CWE-306

TI-2019-09249 CVE-2019-12402 · GHSA-53x6-4x5p-rrvv

Infinite loop in Apache Commons Compress

MEDIUM 49

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16157 Published 2019-08-29 Partial fix · 1.19 CWE-835

TI-2021-01894 CVE-2021-2218 · GHSA-8pc7-6wg7-664j

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft…

MEDIUM 45

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center).

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.01293 Published 2021-04-22 No fix listed

TI-2026-27422 CVE-2026-35274 · GHSA-p535-9j5m-43rw

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 42

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00384 Published 2026-06-16 No fix listed CWE-306

TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj

Improper input validation in Apache HttpClient

MEDIUM 42

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09032 Published 2020-12-02 Partial fix · 4.5.13, 5.0.3 CWE-20

TI-2026-27419 CVE-2026-35271 · GHSA-24j9-242h-cf9v

Improper access control in Oracle PeopleSoft Enterprise PT PeopleTools

MEDIUM 40

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Weblogic).

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00324 Published 2026-06-16 No fix listed CWE-284

TI-2026-27420 CVE-2026-35272 · GHSA-mhvw-hx74-5rhj

Improper privilege management in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 38

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.002 Published 2026-06-16 No fix listed CWE-269

TI-2026-27437 CVE-2026-35289 · GHSA-7jmw-w738-jm9h

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00407 Published 2026-06-16 No fix listed CWE-306

TI-2026-27436 CVE-2026-35288 · GHSA-c768-v4cf-jvx5

Improper privilege management in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00188 Published 2026-06-16 No fix listed CWE-269

TI-2026-27427 CVE-2026-35279 · GHSA-j9rp-p6m7-9ppx

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00374 Published 2026-06-16 No fix listed CWE-306

TI-2026-27424 CVE-2026-35276 · GHSA-24rg-p2fj-6mwp

Missing authentication in Oracle PeopleSoft Enterprise PT PeopleTools

LOW 37

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Application Server).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00416 Published 2026-06-16 No fix listed CWE-306

TI-2021-02077 CVE-2021-2408 · GHSA-8jqj-9r2h-p8hv

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft…

LOW 29

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00853 Published 2021-07-20 No fix listed

TI-2018-02102 CVE-2018-2793 · GHSA-233r-vr3f-2m36

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft…

LOW 28

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin).

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00489 Published 2018-04-19 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2