Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

9 records in Retail Applications · all components

TI-2014-00048 CVE-2014-0050 · GHSA-xx68-jfcg-xmmf

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat…

HIGH 80

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a craf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83334 Published 2014-03-28 Partial fix · 1.3.1, 8.0.3 +1 CWE-835

TI-2015-04048 CVE-2015-4827 · GHSA-rr67-7p69-rj9c

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01783 Published 2015-10-21 No fix listed

TI-2015-00428 CVE-2015-0466 · GHSA-94xg-5c57-993x

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail…

LOW 24

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vector…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01903 Published 2015-04-16 No fix listed

TI-2015-00455 CVE-2015-0494 · GHSA-j5gh-c7wf-rgw9

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail…

LOW 23

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01498 Published 2015-04-16 No fix listed

TI-2016-00388 CVE-2016-0435 · GHSA-922v-rrwc-5j35

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle…

LOW 16

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS.

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00373 Published 2016-01-21 No fix listed

TI-2016-00391 CVE-2016-0438 · GHSA-2rpc-34jr-x8fc

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle…

LOW 11

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vul…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00379 Published 2016-01-21 No fix listed

TI-2016-00390 CVE-2016-0437 · GHSA-64j9-9w5m-qp3h

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle…

LOW 11

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00379 Published 2016-01-21 No fix listed

TI-2016-00389 CVE-2016-0436 · GHSA-24gr-994g-fcwf

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle…

LOW 11

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00379 Published 2016-01-21 No fix listed

TI-2016-00387 CVE-2016-0434 · GHSA-5x53-2cv2-x2fp

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle…

LOW 11

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00379 Published 2016-01-21 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2