Vulnerabilities

TI-2026-57350 CVE-2026-83109 · GHSA-2mqx-mrv5-wjxg

Improper access control in Oracle Forms

LOW 30

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-15 No fix listed CWE-284

TI-2026-57349 CVE-2026-83108 · GHSA-ppxh-vcvf-v8hr

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57345 CVE-2026-83104 · GHSA-5xmg-cqp6-52jv

Improper authentication in Oracle Forms

MEDIUM 48

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-09-15 No fix listed CWE-287

TI-2026-57341 CVE-2026-83100 · GHSA-mg25-4mgh-7r9r

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57340 CVE-2026-83099 · GHSA-82cq-wvc6-h3gw

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57339 CVE-2026-83098 · GHSA-fc3m-f6qr-cq3v

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57338 CVE-2026-83097 · GHSA-4xwx-93fg-ppxf

Improper access control in Oracle Forms

LOW 29

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00427 Published 2026-09-15 No fix listed CWE-284

TI-2026-57336 CVE-2026-83095 · GHSA-x6wv-qv84-p8mx

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57335 CVE-2026-83094 · GHSA-h66h-jh9v-5j69

Improper authentication in Oracle Forms

MEDIUM 49

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287

TI-2026-57334 CVE-2026-83093 · GHSA-q8gj-v4g5-5rj2

Improper access control in Oracle Forms

MEDIUM 43

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-09-15 No fix listed CWE-284

TI-2019-02421 CVE-2019-2886 · GHSA-h3g8-9jfv-85pr

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component…

LOW 29

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Services).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00986 Published 2019-10-16 No fix listed

TI-2005-03033 CVE-2005-3207 · GHSA-f29q-j8gp-v5cf

The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause…

MEDIUM 41

The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.19832 Published 2005-10-14 No fix listed

TI-2005-02244 CVE-2005-2372 · GHSA-h3q5-7899-7pxx

Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and…

LOW 37

Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and refe…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.02864 Published 2005-07-26 No fix listed

TI-2005-02172 CVE-2005-2294 · GHSA-7fj6-cw4m-wqw7

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved…

LOW 12

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensiti…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00564 Published 2005-07-17 No fix listed

TI-2005-01116 CVE-2005-1178 · GHSA-h4wc-w4rm-xv89

SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute…

LOW 36

SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01737 Published 2005-04-19 No fix listed

Vulnerabilities

Filters