Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

97 records in Supply Chain Products Suite · all components

TI-2012-00497 CVE-2012-0549 · GHSA-7q57-p6qc-cv4q

Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain…

HIGH 67

Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and availability, related to Desktop API.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.59045 Published 2012-05-03 No fix listed

TI-2015-01611 CVE-2015-1793 · GHSA-4j29-v246-6w5w

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o…

MEDIUM 63

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, w…

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.58213 Published 2015-07-09 No fix listed CWE-254

TI-2013-05016 CVE-2013-5880 · GHSA-jc9r-hmmh-3m35

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle…

MEDIUM 57

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.59558 Published 2014-01-15 No fix listed

TI-2013-04931 CVE-2013-5795 · GHSA-3xgv-5mmx-xwqh

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle…

MEDIUM 57

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidenti…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.59494 Published 2014-01-15 No fix listed

TI-2013-05013 CVE-2013-5877 · GHSA-vm6g-5mx7-297q

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle…

MEDIUM 56

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.54975 Published 2014-01-15 No fix listed

TI-2026-17640 CVE-2026-21940 · GHSA-mc3v-qmvf-v5gr

Information disclosure in Oracle Agile PLM

LOW 39

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2026-01-20 No fix listed CWE-200

TI-2015-02351 CVE-2015-2663 · GHSA-4hmw-6qpr-wq88

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 36

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality and integrit…

CVSS 2.0HIGH 7.5 Network Low privileges Interaction — EPSS 0.01745 Published 2015-07-16 No fix listed

TI-2014-00352 CVE-2014-0372 · GHSA-mp2c-hhj2-7xjx

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle…

LOW 36

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confiden…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.08762 Published 2014-01-15 No fix listed

TI-2015-02258 CVE-2015-2570 · GHSA-pgp2-pr57-6j62

Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain…

LOW 33

Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality, integrity, and availabili…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02439 Published 2015-04-16 No fix listed

TI-2015-00399 CVE-2015-0435 · GHSA-vjh8-r759-w4p5

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 33

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confide…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.0133 Published 2015-01-21 No fix listed

TI-2014-05383 CVE-2014-6533 · GHSA-frxh-87ph-hrfx

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 33

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1 and 6.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01356 Published 2014-10-15 No fix listed

TI-2014-00359 CVE-2014-0379 · GHSA-7p47-f23x-wmrw

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle…

LOW 30

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07242 Published 2014-01-15 No fix listed

TI-2014-03459 CVE-2014-4234 · GHSA-r93x-32gw-w52p

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 28

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02478 Published 2014-07-17 No fix listed

TI-2013-05033 CVE-2013-5897 · GHSA-7v94-m63m-7j5m

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process…

LOW 28

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0, 6.1, and 6.1.1 allows remote authenticated users to affect confidentiality and i…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01558 Published 2014-01-15 No fix listed

TI-2012-00513 CVE-2012-0565 · GHSA-p6gp-26p8-pgfq

Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products…

LOW 28

Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01657 Published 2012-05-03 No fix listed

TI-2015-00426 CVE-2015-0464 · GHSA-865v-63mv-86hf

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 27

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote attackers to affect confidenti…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01856 Published 2015-04-16 No fix listed

TI-2014-03454 CVE-2014-4229 · GHSA-3x3x-fgf2-hxxv

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 27

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote authenticated users to affect confidentiality and i…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01284 Published 2014-07-17 No fix listed

TI-2012-04286 CVE-2012-5092 · GHSA-8h5r-9wr9-xfxm

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply…

LOW 27

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vector…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01009 Published 2012-10-17 No fix listed

TI-2012-02692 CVE-2012-3140 · GHSA-j63v-w9gx-93w5

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply…

LOW 27

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01009 Published 2012-10-16 No fix listed

TI-2012-00528 CVE-2012-0580 · GHSA-7w5m-j4cm-gp8f

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply…

LOW 27

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Po…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02105 Published 2012-05-03 No fix listed

TI-2011-03111 CVE-2011-3532 · GHSA-c6p2-v494-g23h

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process…

LOW 27

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidential…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02045 Published 2011-10-18 No fix listed

TI-2015-04068 CVE-2015-4848 · GHSA-fq8m-6f3h-7q3c

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain…

LOW 26

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Int…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2015-10-21 No fix listed

TI-2015-00332 CVE-2015-0368 · GHSA-pvfw-h5rj-3f79

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 26

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect availability via un…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01659 Published 2015-01-21 No fix listed

TI-2014-05348 CVE-2014-6498 · GHSA-6mjj-qrf5-95f6

Unspecified vulnerability in the Oracle Transportation Management component in Oracle…

LOW 26

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01447 Published 2014-10-15 No fix listed

TI-2015-00451 CVE-2015-0490 · GHSA-fqwq-wr4g-qffh

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in…

LOW 25

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors rela…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01284 Published 2015-04-16 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2