Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

34 records in Sun Zfs Storage Appliance Kit · all components

TI-2018-11033 CVE-2018-15473 · GHSA-c8qw-h3f6-fv63

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying…

HIGH 71

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c,…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.98675 Published 2018-08-17 Partial fix CWE-362

TI-2018-01930 CVE-2018-2611 · GHSA-9q8m-jmvc-rf46

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 53

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0234 Published 2018-01-18 Fixed in 8.7.13

TI-2019-07051 CVE-2019-9636 · GHSA-v82r-hg27-h4wh

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of…

MEDIUM 52

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07673 Published 2019-03-08 Partial fix CWE-173

TI-2018-01942 CVE-2018-2623 · GHSA-wpc8-gvqx-8pqf

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 49

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).

CVSS 3.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01645 Published 2018-01-18 Fixed in 8.7.13

TI-2018-01943 CVE-2018-2624 · GHSA-gr22-h4qm-pvc4

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 47

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.01965 Published 2018-01-18 Fixed in 8.7.13

TI-2018-01983 CVE-2018-2664 · GHSA-x37f-2w48-xph5

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 44

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.018 Published 2018-01-18 Fixed in 8.7.13

TI-2017-02816 CVE-2017-3621 · GHSA-q5x7-3hhh-4gg3

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 44

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02653 Published 2017-04-24 No fix listed

TI-2018-12288 CVE-2018-17189 · GHSA-xcwr-pcwv-7gm8

Uncontrolled resource consumption in Apache HTTP Server

MEDIUM 42

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.19404 Published 2019-01-30 Fixed CWE-400

TI-2017-02775 CVE-2017-3580 · GHSA-94hw-gc8q-ccr4

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

MEDIUM 42

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems).

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.02014 Published 2017-04-24 No fix listed

TI-2018-02222 CVE-2018-2918 · GHSA-hmvp-993j-38fx

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 39

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.02408 Published 2018-07-18 Fixed in 8.7.18

TI-2018-02359 CVE-2018-3057 · GHSA-f6w3-x639-853j

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 38

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.00458 Published 2018-07-18 Fixed in 8.7.18

TI-2016-04771 CVE-2016-5503 · GHSA-7xhq-5qvr-23m7

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle…

LOW 38

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to…

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.00386 Published 2016-10-25 No fix listed

TI-2018-02225 CVE-2018-2921 · GHSA-8rj5-8qh4-wq4c

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 36

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.02065 Published 2018-07-18 Fixed in 8.7.18

TI-2017-11645 CVE-2017-15906 · GHSA-543w-q592-87ph

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly…

LOW 36

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03359 Published 2017-10-26 Fixed CWE-732

TI-2017-02779 CVE-2017-3584 · GHSA-f3j3-c425-h873

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 36

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems).

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00355 Published 2017-04-24 No fix listed

TI-2018-02224 CVE-2018-2920 · GHSA-pq8f-25qp-57h9

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 35

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).

CVSS 3.0HIGH 7.4 Network Low privileges No interaction EPSS 0.01158 Published 2018-07-18 Fixed in 8.7.19

TI-2018-02221 CVE-2018-2917 · GHSA-4479-m49m-cqmf

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 35

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02664 Published 2018-07-18 Fixed in 8.7.18

TI-2018-02210 CVE-2018-2905 · GHSA-9qrx-2g7r-x6gf

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 34

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02065 Published 2018-07-18 Fixed in 8.7.20

TI-2018-02167 CVE-2018-2858 · GHSA-c7cf-wh8q-pxxh

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 34

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01944 Published 2018-04-19 Fixed in 8.7.17

TI-2018-02240 CVE-2018-2937 · GHSA-f494-3xww-3vw5

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 33

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01489 Published 2018-07-18 Fixed in 8.7.19

TI-2017-02780 CVE-2017-3585 · GHSA-8w27-3w67-9wwg

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 33

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsystem).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01693 Published 2017-04-24 No fix listed

TI-2016-04762 CVE-2016-5492 · GHSA-qg8v-q44g-wjj9

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle…

LOW 33

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00344 Published 2016-10-25 No fix listed CWE-284

TI-2019-01971 CVE-2019-2412 · GHSA-f65x-jmqm-wr2q

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 31

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store).

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.004 Published 2019-01-16 Fixed in 8.8.2

TI-2018-02166 CVE-2018-2857 · GHSA-3vm4-x4f3-6c2j

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 31

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems).

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0136 Published 2018-04-19 Fixed in 8.7.17

TI-2019-02416 CVE-2019-2878 · GHSA-vqrx-98jr-67pq

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems…

LOW 29

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00942 Published 2019-07-23 No fix listed

Open these records in search →