Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

23 records in Virtualization · all components

TI-2014-00223 CVE-2014-0230 · GHSA-pxcx-cxq8-4mmw

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not…

MEDIUM 59

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.20183 Published 2015-06-07 Partial fix · 6.0.44, 7.0.55 +1 CWE-399

TI-2013-03292 CVE-2013-3779 · GHSA-ghg8-4frh-82h9

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization…

LOW 36

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01581 Published 2013-07-17 No fix listed

TI-2011-03117 CVE-2011-3538 · GHSA-pqmv-9q77-mrhp

Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows…

LOW 34

Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02098 Published 2011-10-18 No fix listed

TI-2015-02269 CVE-2015-2581 · GHSA-w3q4-g368-8grw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 33

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via unknown vectors related to JServer.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02171 Published 2015-07-16 No fix listed

TI-2014-01949 CVE-2014-2439 · GHSA-79m6-q5h9-fv2f

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle…

LOW 32

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Workspace…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01791 Published 2014-04-16 No fix listed

TI-2020-08670 CVE-2020-10775 · GHSA-7wqr-p83r-v6rj

Open redirect in ovirt-engine

LOW 28

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0185 Published 2020-08-24 Partial fix CWE-451

TI-2014-05309 CVE-2014-6459 · GHSA-45ph-v89f-6r82

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 26

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv), a differen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01625 Published 2014-10-15 No fix listed

TI-2014-01985 CVE-2014-2476 · GHSA-pcgp-8cx2-wv9f

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 26

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01317 Published 2014-10-15 No fix listed

TI-2014-01984 CVE-2014-2475 · GHSA-r74x-37ww-89gq

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 26

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01802 Published 2014-10-15 No fix listed

TI-2014-01983 CVE-2014-2474 · GHSA-jcm6-69wc-wxfr

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 26

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01317 Published 2014-10-15 No fix listed

TI-2014-01981 CVE-2014-2472 · GHSA-q3r5-cv5m-p78c

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 26

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01317 Published 2014-10-15 No fix listed

TI-2021-03490 CVE-2021-20191 · GHSA-8f4m-hccc-8qph

Sensitive information in log files in ansible

LOW 25

A flaw was found in ansible.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00347 Published 2021-05-26 Partial fix · 2.9.18rc1, 2.8.19rc1 +1 CWE-532

TI-2014-01982 CVE-2014-2473 · GHSA-w72r-2wgf-qg44

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 25

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01267 Published 2014-10-15 No fix listed

TI-2013-03345 CVE-2013-3834 · GHSA-cxfj-rr4r-jpgh

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle…

LOW 25

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01281 Published 2013-10-16 No fix listed

TI-2014-03457 CVE-2014-4232 · GHSA-p74p-3c84-fg2v

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle…

LOW 24

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web App…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02074 Published 2014-07-17 No fix listed

TI-2014-01972 CVE-2014-2463 · GHSA-77fg-gh9x-xf97

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle…

LOW 23

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01516 Published 2014-04-16 No fix listed

TI-2013-03295 CVE-2013-3782 · GHSA-8w6x-8cjm-r288

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization…

LOW 23

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 prior to 4.63 and 4.7 prior to 4.71 allows remote attackers to affect integrity via unknown vectors related to Web UI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01351 Published 2013-07-17 No fix listed

TI-2012-01473 CVE-2012-1685 · GHSA-86jr-59gf-89v2

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization…

LOW 23

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 allows remote attackers to affect integrity via unknown vectors related to Core.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0146 Published 2012-10-16 No fix listed

TI-2011-03148 CVE-2011-3571 · GHSA-fjgc-8pc6-5qr3

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle…

LOW 21

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Sessio…

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.01632 Published 2012-01-18 Partial fix

TI-2012-00104 CVE-2012-0105 · GHSA-9hf4-3xg5-8j35

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization…

LOW 18

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Addition…

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00337 Published 2012-01-18 No fix listed

TI-2012-00110 CVE-2012-0111 · GHSA-8qhw-64rw-5825

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization…

LOW 17

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00395 Published 2012-01-18 No fix listed

TI-2013-00348 CVE-2013-0420 · GHSA-p2wh-44xv-2q95

Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1…

LOW 13

Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core.

CVSS 2.0LOW 2.4 Local Low privileges Interaction — EPSS 0.00405 Published 2013-01-17 No fix listed

TI-2012-02773 CVE-2012-3221 · GHSA-pxpj-94wm-p9ff

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization…

LOW 13

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00791 Published 2012-10-17 No fix listed

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2