Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

45 records in Reports Developer · all components

TI-2026-49364 CVE-2026-70669 · GHSA-28r9-fq76-c9xj

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44754 CVE-2026-62640 · GHSA-jwf8-92vf-5g5p

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44753 CVE-2026-62639 · GHSA-vxgm-5h7g-q6rv

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44749 CVE-2026-62635 · GHSA-j6wm-4vww-76x6

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44748 CVE-2026-62634 · GHSA-mqc3-p2pp-hj79

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44747 CVE-2026-62633 · GHSA-9569-mr35-wpf7

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44746 CVE-2026-62632 · GHSA-mjwj-3vxp-95x3

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44744 CVE-2026-62630 · GHSA-rwjx-75cm-f4hj

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44740 CVE-2026-62626 · GHSA-f8v6-f49w-xr66

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44738 CVE-2026-62624 · GHSA-4f8j-3ph5-xq82

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44736 CVE-2026-62622 · GHSA-5m2j-5j53-hp75

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44735 CVE-2026-62621 · GHSA-43j6-gp7v-8qxh

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44731 CVE-2026-62617 · GHSA-mf33-5xhc-2pgr

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44728 CVE-2026-62614 · GHSA-fgvx-m25p-3chm

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44725 CVE-2026-62611 · GHSA-q323-2c72-vrq8

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-44723 CVE-2026-62609 · GHSA-5rph-w6gp-8p7m

Improper access control in Oracle Reports Developer

Priority MEDIUM 49

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-49363 CVE-2026-70668 · GHSA-9cx7-x3mw-h3qw

Improper access control in Oracle Reports Developer

Priority MEDIUM 48

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-44724 CVE-2026-62610 · GHSA-mh2r-63qq-gxhw

Improper access control in Oracle Reports Developer

Priority MEDIUM 48

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-44743 CVE-2026-62629 · GHSA-m5hf-2fc2-mh4v

Improper access control in Oracle Reports Developer

Priority MEDIUM 47

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284
TI-2026-49368 CVE-2026-70673 · GHSA-9552-qpgf-77gj

Improper access control in Oracle Reports Developer

Priority MEDIUM 46

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284
TI-2026-44752 CVE-2026-62638 · GHSA-f9jg-5mrr-mj43

Improper access control in Oracle Reports Developer

Priority MEDIUM 46

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-284
TI-2026-44732 CVE-2026-62618 · GHSA-267c-jhc6-fqwp

Improper access control in Oracle Reports Developer

Priority MEDIUM 46

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284
TI-2026-49365 CVE-2026-70670 · GHSA-9qm8-fw85-hxhf

Improper access control in Oracle Reports Developer

Priority MEDIUM 43

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00395 Published 2026-08-18 No fix listed CWE-284
TI-2026-44750 CVE-2026-62636 · GHSA-mjxg-mgv4-crvj

Improper access control in Oracle Reports Developer

Priority MEDIUM 43

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00377 Published 2026-08-18 No fix listed CWE-284
TI-2026-44742 CVE-2026-62628 · GHSA-mj45-574g-4782

Improper access control in Oracle Reports Developer

Priority MEDIUM 43

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284
Load more
Open these records in search →