Vulnerabilities

TI-2026-77658 CVE-2026-91668 · GHSA-c5gf-843c-mpfw

Improper privilege management in Oracle Data Integrator

MEDIUM 40

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00262 Published 2026-10-20 No fix listed CWE-269

TI-2026-77108 CVE-2026-83398 · GHSA-p7p3-9c7q-4xxv

Missing authentication in Oracle Data Integrator exposes data

MEDIUM 42

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00338 Published 2026-10-20 No fix listed CWE-306

TI-2026-77107 CVE-2026-83397 · GHSA-7jw5-4rmw-94x9

Missing authentication in Oracle Data Integrator Console

MEDIUM 49

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-77106 CVE-2026-83396 · GHSA-4228-vh82-7c23

Missing authentication in Oracle Data Integrator enables takeover

MEDIUM 49

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-20 No fix listed CWE-287

TI-2026-57472 CVE-2026-83232 · GHSA-6h39-f2j4-q3f9

Improper authentication in Oracle Data Integrator

MEDIUM 49

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-43643 CVE-2026-60999 · GHSA-qj94-r63r-g3g4

Improper access control in Oracle Data Integrator

MEDIUM 49

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-43386 CVE-2026-60723 · GHSA-jmc8-p7mj-27m6

Improper access control in Oracle Data Integrator

LOW 38

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place).

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00159 Published 2026-07-21 No fix listed CWE-284

TI-2026-43290 CVE-2026-60625 · GHSA-7mch-hf92-496m

Improper privilege management in Oracle Data Integrator

LOW 35

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-269

TI-2026-43021 CVE-2026-60320 · GHSA-9wc2-6rpj-5xf3

Improper access control in Oracle Data Integrator

LOW 39

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284

TI-2026-43020 CVE-2026-60319 · GHSA-mp3q-f8jf-7268

Improper access control in Oracle Data Integrator

LOW 28

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant).

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00154 Published 2026-07-21 No fix listed CWE-284

TI-2026-43019 CVE-2026-60318 · GHSA-332v-hxpf-4m4c

Information disclosure in Oracle Data Integrator

LOW 15

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant).

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00155 Published 2026-07-21 No fix listed CWE-200

TI-2026-34658 CVE-2026-47056 · GHSA-42vm-5c82-p5wp

Missing authentication in Oracle Data Integrator

MEDIUM 49

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306

TI-2026-27411 CVE-2026-35262 · GHSA-55r3-245q-fvcf

Improper access control in Oracle Data Integrator

LOW 38

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place).

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00387 Published 2026-06-16 No fix listed CWE-284

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2021-01704 CVE-2021-2018 · GHSA-q87v-4pg3-cw3m

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01459 Published 2021-01-20 No fix listed

TI-2021-01701 CVE-2021-2015 · GHSA-8ww5-7wc7-5j2j

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

LOW 38

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01184 Published 2021-01-20 No fix listed

TI-2020-18499 CVE-2020-36179 · GHSA-9gph-22xh-8x98

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17065 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18500 CVE-2020-36180 · GHSA-8c4j-34r4-xr8g

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18502 CVE-2020-36182 · GHSA-89qr-369f-5m5x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18503 CVE-2020-36183 · GHSA-9m6f-7xcq-8vf8

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04972 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18504 CVE-2020-36184 · GHSA-m6x4-97wx-4q27

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08356 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18505 CVE-2020-36185 · GHSA-8w26-6f25-cm9x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18506 CVE-2020-36186 · GHSA-v585-23hc-c647

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18507 CVE-2020-36187 · GHSA-r695-7vr9-jgc2

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

Vulnerabilities

Filters