Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

42 records in Soa Suite · all components

TI-2017-03645 CVE-2017-5645 · GHSA-fxph-q3j8-mv87

Deserialization of untrusted data in Apache Log4j

CRITICAL 91

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.89358 Published 2017-04-17 Partial fix · 2.8.2 CWE-502

TI-2018-15967 CVE-2018-1000613 · GHSA-4446-656p-f54g

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to…

MEDIUM 56

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vuln…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04767 Published 2018-07-09 Partial fix · 1.60 CWE-470

TI-2026-77296 CVE-2026-91236 · GHSA-36c9-4crg-8qwj

Missing authentication in Oracle SOA Suite Fabric Layer

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-77295 CVE-2026-91235 · GHSA-hx26-3rfj-7696

Authentication flaw in Oracle SOA Suite Fabric Layer allows takeover

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-77294 CVE-2026-91234 · GHSA-fcvm-x3q2-xh87

Missing authentication in Oracle SOA Suite Fabric Layer

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-77293 CVE-2026-91233 · GHSA-rp9g-cr78-xjfc

Missing authentication in Oracle SOA Suite allows takeover

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-77291 CVE-2026-91231 · GHSA-8w44-v3mg-gc74

Missing authentication in Oracle SOA Suite adapters enables takeover

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-10-20 No fix listed CWE-306

TI-2026-77281 CVE-2026-91221 · GHSA-v9rc-g7hp-xmc6

Improper access control in Oracle SOA Suite Fabric Layer

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-10-20 No fix listed CWE-284

TI-2026-77276 CVE-2026-91216 · GHSA-rp3f-xpmp-5x2r

Unauthenticated network attacks can take over Oracle SOA Suite

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-10-20 No fix listed CWE-284

TI-2026-77274 CVE-2026-91214 · GHSA-f8mw-wx29-f2m8

Missing authentication in Oracle SOA Suite allows takeover

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-43206 CVE-2026-60541 · GHSA-xpm7-m2r7-wpxv

Improper access control in Oracle SOA Suite

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-43203 CVE-2026-60538 · GHSA-3rvh-mmrx-54vf

Missing authentication in Oracle SOA Suite

MEDIUM 49

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306

TI-2026-77290 CVE-2026-91230 · GHSA-6w75-2p53-mvv6

Missing authentication in Oracle SOA Suite Fabric Layer

MEDIUM 46

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00338 Published 2026-10-20 No fix listed CWE-284

TI-2026-77285 CVE-2026-91225 · GHSA-jh97-mw96-7h4v

Improper access control in Oracle SOA Suite Adapters

MEDIUM 45

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00416 Published 2026-10-20 No fix listed CWE-284

TI-2019-12957 CVE-2019-17359 · GHSA-2mh8-gx2m-mr75

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted…

MEDIUM 44

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0877 Published 2019-10-08 Fixed in 1.64 CWE-770

TI-2026-77292 CVE-2026-91232 · GHSA-vg3p-892v-r9hp

Improper access control in Oracle SOA Suite Fabric Layer

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-284

TI-2026-77284 CVE-2026-91224 · GHSA-rwqr-64xw-h3w6

Improper access control in Oracle SOA Suite Fabric Layer

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-20 No fix listed CWE-284

TI-2026-77279 CVE-2026-91219 · GHSA-m5r5-743r-gvcr

Missing authentication in Oracle SOA Suite Fabric Layer

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00307 Published 2026-10-20 No fix listed CWE-200

TI-2026-77278 CVE-2026-91218 · GHSA-5xr7-qwg2-jv62

Improper access control in Oracle SOA Suite Fabric Layer

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00337 Published 2026-10-20 No fix listed CWE-284

TI-2026-77277 CVE-2026-91217 · GHSA-5rxc-hrhp-qgw3

Missing authentication in Oracle SOA Suite Fabric Layer exposes data

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00396 Published 2026-10-20 No fix listed CWE-200

TI-2026-43205 CVE-2026-60540 · GHSA-7q88-c6w3-9rw9

Improper access control in Oracle SOA Suite

MEDIUM 43

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2026-43209 CVE-2026-60544 · GHSA-ww3j-m9w6-m776

Missing authentication in Oracle SOA Suite

MEDIUM 42

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00443 Published 2026-07-21 No fix listed CWE-306

TI-2026-77299 CVE-2026-91239 · GHSA-4h27-2cmx-6r66

Fabric Layer flaw in Oracle SOA Suite lets attackers take over

MEDIUM 40

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-306

TI-2026-77283 CVE-2026-91223 · GHSA-5p9f-2m5j-cv6r

Improper access control in Oracle SOA Suite lets attackers take over

MEDIUM 40

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-284

TI-2026-77275 CVE-2026-91215 · GHSA-vg4w-rwjp-q87c

Access control flaw in Oracle SOA Suite Fabric Layer

MEDIUM 40

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-284

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2