Vulnerabilities

TI-2026-26563 CVE-2026-34274 · GHSA-26v3-j7q3-5cqg

Improper access control in Oracle Configurator

LOW 26

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00179 Published 2026-04-21 No fix listed CWE-284

TI-2026-17671 CVE-2026-21972 · GHSA-cmc5-v4f4-9hm4

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component…

LOW 30

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2026-01-20 No fix listed

TI-2025-38253 CVE-2025-61884 · GHSA-rcj9-qvh8-q3c8

Path traversal in Oracle Configurator

CRITICAL 90KEV

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.95891 Published 2025-10-12 No fix listed CWE-22

TI-2025-22001 CVE-2025-30728 · GHSA-wjf2-jp32-r3w3

Improper access control in Oracle Configurator

LOW 39

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00428 Published 2025-04-15 No fix listed CWE-284

TI-2025-21993 CVE-2025-30720 · GHSA-8fmg-xgjm-9r26

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component…

LOW 27

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00278 Published 2025-04-15 No fix listed

TI-2022-05646 CVE-2022-21255 · GHSA-vwrw-2hr4-p2rx

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component…

LOW 39

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01091 Published 2022-01-19 No fix listed

TI-2021-01765 CVE-2021-2080 · GHSA-gmgw-m963-7jfx

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI…

LOW 38

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01271 Published 2021-01-20 No fix listed

TI-2021-01764 CVE-2021-2079 · GHSA-9c69-hwcc-2mrx

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI…

LOW 38

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01271 Published 2021-01-20 No fix listed

TI-2021-01763 CVE-2021-2078 · GHSA-8jv4-3cwp-xgq4

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI…

LOW 38

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01271 Published 2021-01-20 No fix listed

TI-2020-11518 CVE-2020-14669 · GHSA-7822-rrh7-pwm7

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI…

LOW 38

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01349 Published 2020-07-15 No fix listed

TI-2020-02564 CVE-2020-2865 · GHSA-45gj-vhmv-w7fr

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component…

LOW 33

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01403 Published 2020-04-15 No fix listed

TI-2019-02117 CVE-2019-2567 · GHSA-6mrp-f323-h9mx

Vulnerability in the Oracle Configurator component of Oracle Supply Chain Products Suite…

MEDIUM 42

Vulnerability in the Oracle Configurator component of Oracle Supply Chain Products Suite (subcomponent: Active Model Generation).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01612 Published 2019-04-23 No fix listed

TI-2016-02898 CVE-2016-3438 · GHSA-cxmh-7258-x88w

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain…

MEDIUM 40

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Hear…

CVSS 3.0HIGH 8.2 Network No auth User interaction EPSS 0.02134 Published 2016-04-21 No fix listed

TI-2016-00494 CVE-2016-0541 · GHSA-pm3g-p26h-jj38

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain…

LOW 26

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2016-01-21 No fix listed

TI-2016-00493 CVE-2016-0540 · GHSA-5q28-759p-xwrx

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain…

LOW 26

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01831 Published 2016-01-21 No fix listed

TI-2002-01561 CVE-2002-1640 · GHSA-r66q-2j7h-5j4p

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before…

LOW 38

Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05236 Published 2005-03-28 No fix listed

TI-2002-01560 CVE-2002-1639 · GHSA-mqr3-hx46-j2rf

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to…

MEDIUM 41

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05332 Published 2005-03-28 No fix listed

Vulnerabilities

Filters