Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

15 records in Scripting · all components

TI-2017-02745 CVE-2017-3549 · GHSA-8jj8-f575-hppp

SQL injection in Oracle Scripting

Priority MEDIUM 63

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration).

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.15784 Published 2017-04-24 No fix listed CWE-89
TI-2026-43620 CVE-2026-60976 · GHSA-2jrg-8rpf-4qpv

Improper access control in Oracle Scripting

Priority MEDIUM 40

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-49505 CVE-2026-70810 · GHSA-q7w7-x255-52rp

Improper access control in Oracle Scripting

Priority LOW 39

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284
TI-2026-43623 CVE-2026-60979 · GHSA-pjcm-7mv5-f9w6

Improper access control in Oracle Scripting

Priority LOW 37

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-284
TI-2026-49504 CVE-2026-70809 · GHSA-3j87-qw27-vj22

Improper access control in Oracle Scripting

Priority LOW 31

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00299 Published 2026-08-18 No fix listed CWE-284
TI-2026-49503 CVE-2026-70808 · GHSA-5r42-gx5f-535r

Improper access control in Oracle Scripting

Priority LOW 31

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.003 Published 2026-08-18 No fix listed CWE-284
TI-2026-43622 CVE-2026-60978 · GHSA-w674-wjqx-2vg9

Improper access control in Oracle Scripting

Priority LOW 31

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00407 Published 2026-07-21 No fix listed CWE-284
TI-2026-17643 CVE-2026-21943 · GHSA-jp6j-38xx-x6v3

Cross-site scripting in Oracle Scripting

Priority LOW 27

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00244 Published 2026-01-20 No fix listed CWE-79
TI-2025-38147 CVE-2025-61753 · GHSA-8rxc-xw2c-r3g9

Open redirect in Oracle Scripting

Priority LOW 27

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2025-10-21 No fix listed CWE-601
TI-2026-43907 CVE-2026-61263 · GHSA-59wc-35rc-gm4q

Improper access control in Oracle Scripting

Priority LOW 24

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00231 Published 2026-07-21 No fix listed CWE-284
Open these records in search →