Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

15 records in Siebel Apps - Marketing · all components

TI-2020-07593 CVE-2020-9484 · GHSA-344f-f5vg-2jfj

Deserialization of untrusted data in Apache Tomcat

Priority HIGH 66

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.5552 Published 2020-05-20 Partial fix · 10.0.0-M5, 9.0.35 +2 CWE-502
TI-2026-43427 CVE-2026-60767 · GHSA-hr83-q5q2-f4rh

Improper access control in Oracle Siebel Apps - Marketing

Priority MEDIUM 40

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-43411 CVE-2026-60751 · GHSA-xpfp-2827-6j88

Improper access control in Oracle Siebel Apps - Marketing

Priority MEDIUM 40

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-34492 CVE-2026-46886 · GHSA-4g8m-gjjc-qpm2

Improper access control in Oracle Siebel Apps - Marketing

Priority MEDIUM 40

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-284
TI-2026-43468 CVE-2026-60808 · GHSA-j94m-hgpf-5377

Improper access control in Oracle Siebel Apps - Marketing

Priority LOW 34

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).

CVSS 3.1HIGH 7.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-08-18 No fix listed CWE-284
TI-2026-43425 CVE-2026-60765 · GHSA-3392-v8r6-phr9

Missing authentication in Oracle Siebel Apps - Marketing

Priority LOW 34

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00182 Published 2026-08-18 No fix listed CWE-306
TI-2020-07597 CVE-2020-9488 · GHSA-vwqq-5vrc-xw9h

Improper certificate validation in Apache Log4j

Priority LOW 29

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.08216 Published 2020-04-27 Partial fix · 2.12.3, 2.13.2 +1 CWE-295
Open these records in search →