Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-5604	Oracle Corporation Enterprise Manager Base Platform	Med	0.41	6.3	0.00	Oct 25, 2016	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563.
CVE-2016-5601	Oracle Corporation Weblogic Server	Med	0.41	6.3	0.00	Oct 25, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.
CVE-2016-2837	Mozilla Corporation Firefox	Med	0.41	6.3	0.05	Aug 5, 2016	Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and…
CVE-2016-3563	Oracle Corporation Enterprise Manager Base Platform	Med	0.41	6.3	0.00	Jul 21, 2016	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604.
CVE-2026-87279	Oracle Corporation VM Virtualbox	Med	0.40	6.1	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87278	Oracle Corporation VM Virtualbox	Med	0.40	6.1	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87253	Oracle Corporation Agile Plm	Med	0.40	6.1	0.00	Sep 15, 2026	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. …
CVE-2026-87169	Oracle Corporation Contract Lifecycle Management for Public Sector	Med	0.40	6.1	0.00	Sep 15, 2026	Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage Determination Online). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-73898	Oracle Corporation Helidon	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73870	Oracle Corporation Helidon	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73869	Oracle Corporation Helidon	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71154	Oracle Corporation Helidon	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Helidon executes to…
CVE-2026-71125	Oracle Corporation VM Virtualbox	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71031	Oracle Corporation Commerce Guided Search / Oracle Commerce Experience Manager	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71025	Oracle Corporation Commerce Guided Search / Oracle Commerce Experience Manager	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71019	Oracle Corporation Commerce Guided Search	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71011	Oracle Corporation Commerce	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71006	Oracle Corporation Commerce	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71005	Oracle Corporation Commerce	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71004	Oracle Corporation Commerce	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-70961	Oracle Corporation Hyperion	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-70923	Oracle Corporation Fusion Middleware	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-70838	Oracle Corporation Hyperion	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70768	Oracle Corporation Hyperion Financial Reporting	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-70765	Oracle Corporation Hyperion	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-62568	Oracle Corporation Hyperion	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-62499	Oracle Corporation Hyperion	Med	0.40	6.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-61220	Oracle Corporation Oracle Financial Services Applications	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Configuration). The supported version that is affected is 14.5.0.16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-60842	Oracle Corporation Knowledge Management	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-60805	Oracle Corporation Cost Management	Med	0.40	6.2	0.00	Jul 21, 2026	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60747	Oracle Corporation Mysql Server	Med	0.40	6.2	0.00	Jul 21, 2026	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable…
CVE-2026-60685	Oracle Corporation Isupport	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-60608	Oracle Corporation Peoplesoft Enterprise Cs Financial Aid	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-60162	Oracle Corporation VM Virtualbox	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-60161	Oracle Corporation VM Virtualbox	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-34316	Oracle Corporation Commerce Service Center	Med	0.40	6.1	0.00	Jul 21, 2026	Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-46812	Oracle Corporation Access Manager	Med	0.40	6.1	0.00	Jun 17, 2026	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-46770	Oracle Corporation Application Development Framework	Med	0.40	6.1	0.00	Jun 17, 2026	Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-35254	Oracle Corporation OCI CLI	Med	0.40	6.1	0.00	May 6, 2026	Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this…
CVE-2026-34284	Oracle Corporation Business Process Management Suite	Med	0.40	6.1	0.00	Apr 21, 2026	Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-34283	Oracle Corporation Identity Manager	Med	0.40	6.1	0.00	Apr 21, 2026	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-34274	Oracle Corporation Configurator	Med	0.40	6.1	0.00	Apr 21, 2026	Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-34269	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.00	Apr 21, 2026	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
CVE-2026-21966	Oracle Corporation Hospitality Opera 5	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and 5.6.27.4. Easily exploitable vulnerability allows unauthenticated…
CVE-2026-21961	Oracle Corporation PeopleSoft Enterprise HCM Human Resources	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer, Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-21951	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-21946	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-21943	Oracle Corporation Scripting	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-21938	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-21933	Graalvm Graalvm Ce Builds	Med	0.40	6.1	0.00	Jan 20, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle…

CVE-2016-5604MedOct 25, 2016
Oracle Corporation
Enterprise Manager Base Platform
risk 0.41cvss 6.3epss 0.00
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563.
CVE-2016-5601MedOct 25, 2016
Oracle Corporation
Weblogic Server
risk 0.41cvss 6.3epss 0.00
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components.
CVE-2016-2837MedAug 5, 2016
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.05
Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and…
CVE-2016-3563MedJul 21, 2016
Oracle Corporation
Enterprise Manager Base Platform
risk 0.41cvss 6.3epss 0.00
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604.
CVE-2026-87279MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87278MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87253MedSep 15, 2026
Oracle Corporation
Agile Plm
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. …
CVE-2026-87169MedSep 15, 2026
Oracle Corporation
Contract Lifecycle Management for Public Sector
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage Determination Online). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-73898MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73870MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73869MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71154MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Helidon executes to…
CVE-2026-71125MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71031MedAug 18, 2026
Oracle Corporation
Commerce Guided Search / Oracle Commerce Experience Manager
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71025MedAug 18, 2026
Oracle Corporation
Commerce Guided Search / Oracle Commerce Experience Manager
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71019MedAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71011MedAug 18, 2026
Oracle Corporation
Commerce
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71006MedAug 18, 2026
Oracle Corporation
Commerce
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71005MedAug 18, 2026
Oracle Corporation
Commerce
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71004MedAug 18, 2026
Oracle Corporation
Commerce
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-70961MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-70923MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-70838MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70768MedAug 18, 2026
Oracle Corporation
Hyperion Financial Reporting
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-70765MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-62568MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-62499MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-61220MedJul 21, 2026
Oracle Corporation
Oracle Financial Services Applications
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Configuration). The supported version that is affected is 14.5.0.16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-60842MedJul 21, 2026
Oracle Corporation
Knowledge Management
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-60805MedJul 21, 2026
Oracle Corporation
Cost Management
risk 0.40cvss 6.2epss 0.00
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60747MedJul 21, 2026
Oracle Corporation
Mysql Server
risk 0.40cvss 6.2epss 0.00
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable…
CVE-2026-60685MedJul 21, 2026
Oracle Corporation
Isupport
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-60608MedJul 21, 2026
Oracle Corporation
Peoplesoft Enterprise Cs Financial Aid
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-60162MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-60161MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-34316MedJul 21, 2026
Oracle Corporation
Commerce Service Center
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-46812MedJun 17, 2026
Oracle Corporation
Access Manager
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-46770MedJun 17, 2026
Oracle Corporation
Application Development Framework
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-35254MedMay 6, 2026
Oracle Corporation
OCI CLI
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this…
CVE-2026-34284MedApr 21, 2026
Oracle Corporation
Business Process Management Suite
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-34283MedApr 21, 2026
Oracle Corporation
Identity Manager
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-34274MedApr 21, 2026
Oracle Corporation
Configurator
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-34269MedApr 21, 2026
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
CVE-2026-21966MedJan 20, 2026
Oracle Corporation
Hospitality Opera 5
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and 5.6.27.4. Easily exploitable vulnerability allows unauthenticated…
CVE-2026-21961MedJan 20, 2026
Oracle Corporation
PeopleSoft Enterprise HCM Human Resources
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer, Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-21951MedJan 20, 2026
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-21946MedJan 20, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-21943MedJan 20, 2026
Oracle Corporation
Scripting
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-21938MedJan 20, 2026
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-21933MedJan 20, 2026
Graalvm
Graalvm Ce Builds
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle…

Page 106 of 270