Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

483 records in Vm Virtualbox · all components

TI-2019-02266 CVE-2019-2725 · GHSA-m437-3crh-7475

Injection in Oracle Tape Library ACSLS

Priority CRITICAL 100KEV

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99977 Published 2019-04-26 No fix listed CWE-74
TI-2025-21985 CVE-2025-30712 · GHSA-7xcg-8h7r-rgfx

Integer overflow in Oracle VM VirtualBox

Priority HIGH 70

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

CVSS 3.1HIGH 8.1 Local High privileges No interaction EPSS 0.00612 Published 2025-04-15 No fix listed CWE-190
TI-2024-13903 CVE-2024-21111 · GHSA-gvqq-xg2j-r2p6

Improper privilege management in Oracle VM VirtualBox

Priority HIGH 69

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0178 Published 2024-04-16 Fixed in 7.0.16 CWE-269
TI-2017-03706 CVE-2017-5715

Observable discrepancy in Intel Microprocessors with Speculative Execution

Priority MEDIUM 63

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.73249 Published 2018-01-04 Partial fix CWE-203
TI-2015-06741 CVE-2015-8104 · GHSA-878r-5qjm-6859

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows…

Priority MEDIUM 54

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02481 Published 2015-11-16 Partial fix CWE-399
TI-2015-02826 CVE-2015-3195 · GHSA-7q2f-v729-wjf3

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh…

Priority MEDIUM 51

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.38709 Published 2015-12-06 Partial fix CWE-200
TI-2017-02516 CVE-2017-3316 · GHSA-238x-xx54-w2xc

Improper input validation in Oracle VM VirtualBox

Priority MEDIUM 48

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI).

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.06961 Published 2017-01-27 Fixed in 5.0.32, 5.1.14 CWE-20
TI-2017-02759 CVE-2017-3563 · GHSA-hrqx-2h9x-w494

Improper certificate validation in Oracle VM VirtualBox

Priority MEDIUM 43

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.0136 Published 2017-04-24 Fixed in 5.0.38, 5.1.20 CWE-295
TI-2026-49821 CVE-2026-71130 · GHSA-95ph-h476-mm5f

Improper access control in Oracle VM VirtualBox

Priority MEDIUM 42

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284
TI-2022-18792 CVE-2022-39425 · GHSA-9xgx-w3jc-5fhh

Missing authentication in Oracle VM VirtualBox

Priority MEDIUM 41

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02138 Published 2022-10-18 Fixed in 6.1.40 CWE-306
Load more
Open these records in search →