Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2025-62287	Oracle Corporation Life Sciences Inform	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-61753	Oracle Corporation Scripting	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2025-53060	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-53058	Oracle Corporation Applications Manager	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2025-53056	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53055	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53052	Oracle Corporation Workflow	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53041	Oracle Corporation Istore	Med	0.40	6.1	Oct 21, 2025	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2025-30755	OpenGrok OpenGrok	Med	0.40	6.1	Sep 19, 2025	OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.
CVE-2025-50107	Oracle Corporation Universal Work Queue	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Request handling). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-50073	Oracle Corporation Weblogic Server	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2025-30759	Oracle Corporation Business Intelligence	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2025-30756	Oracle Corporation REST Data Services	Med	0.40	6.1	Jul 15, 2025	Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require…
CVE-2025-30748	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-30746	Oracle Corporation Istore	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2025-30745	Oracle Corporation Mes For Process Manufacturing	Med	0.40	6.1	Jul 15, 2025	Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2025-21572	OpenGrok OpenGrok	Med	0.40	6.1	May 2, 2025	OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.
CVE-2025-30732	Oracle Corporation Application Object Library	Med	0.40	6.1	Apr 15, 2025	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-30720	Oracle Corporation Configurator	Med	0.40	6.1	Apr 15, 2025	Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2025-30719	Oracle Corporation VM Virtualbox	Med	0.40	6.1	Apr 15, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-30709	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Apr 15, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21582	Oracle Corporation CRM Technical Foundation	Med	0.40	6.1	Apr 15, 2025	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21570	Oracle Corporation Argus Safety	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences Applications (component: Login). The supported version that is affected is 8.2.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-21550	Oracle Corporation Financial Services Behavior Detection Platform	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2025-21538	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21527	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21513	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21512	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21489	Oracle Corporation Advanced Outbound Telephony	Med	0.40	6.1	Jan 21, 2025	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-9653	WordPress Restaurant Menu – Food Ordering System – Table Reservation	Med	0.40	6.1	Nov 20, 2024	The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes…
CVE-2024-21263	Oracle Corporation VM Virtualbox	Med	0.40	6.1	Oct 15, 2024	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2024-21202	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	Oct 15, 2024	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21188	Oracle Corporation Financial Services Revenue Management And Billing	Med	0.40	6.1	Jul 16, 2024	Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2024-21178	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	Jul 16, 2024	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21150	Oracle Corporation Jd Edwards Enterpriseone	Med	0.40	6.1	Jul 16, 2024	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21133	Oracle Corporation Reports Developer	Med	0.40	6.1	Jul 16, 2024	Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Servlet). Supported versions that are affected are 12.2.1.4.0 and 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21072	Oracle Corporation Installed Base	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21065	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21063	Oracle Corporation Peoplesoft Enterprise Hcm Benefits Administration	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft (component: Benefits Administration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2024-21046	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21045	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21044	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21043	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21042	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21041	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21040	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21039	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21038	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21037	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21036	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Med	0.40	6.1	Apr 16, 2024	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

CVE-2025-62287MedOct 21, 2025
Oracle Corporation
Life Sciences Inform
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications (component: Web Server). The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-61753MedOct 21, 2025
Oracle Corporation
Scripting
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2025-53060MedOct 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-53058MedOct 21, 2025
Oracle Corporation
Applications Manager
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2025-53056MedOct 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Environment Tech). Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53055MedOct 21, 2025
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53052MedOct 21, 2025
Oracle Corporation
Workflow
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-53041MedOct 21, 2025
Oracle Corporation
Istore
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2025-30755MedSep 19, 2025
OpenGrok
OpenGrok
risk 0.40cvss 6.1epss 0.00
OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.
CVE-2025-50107MedJul 15, 2025
Oracle Corporation
Universal Work Queue
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Request handling). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-50073MedJul 15, 2025
Oracle Corporation
Weblogic Server
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2025-30759MedJul 15, 2025
Oracle Corporation
Business Intelligence
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2025-30756MedJul 15, 2025
Oracle Corporation
REST Data Services
risk 0.40cvss 6.1epss 0.00
Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require…
CVE-2025-30748MedJul 15, 2025
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-30746MedJul 15, 2025
Oracle Corporation
Istore
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2025-30745MedJul 15, 2025
Oracle Corporation
Mes For Process Manufacturing
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2025-21572MedMay 2, 2025
OpenGrok
OpenGrok
risk 0.40cvss 6.1epss 0.00
OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.
CVE-2025-30732MedApr 15, 2025
Oracle Corporation
Application Object Library
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-30720MedApr 15, 2025
Oracle Corporation
Configurator
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2025-30719MedApr 15, 2025
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-30709MedApr 15, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21582MedApr 15, 2025
Oracle Corporation
CRM Technical Foundation
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21570MedJan 21, 2025
Oracle Corporation
Argus Safety
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences Applications (component: Login). The supported version that is affected is 8.2.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2025-21550MedJan 21, 2025
Oracle Corporation
Financial Services Behavior Detection Platform
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated…
CVE-2025-21538MedJan 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21527MedJan 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21513MedJan 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21512MedJan 21, 2025
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2025-21489MedJan 21, 2025
Oracle Corporation
Advanced Outbound Telephony
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-9653MedNov 20, 2024
WordPress
Restaurant Menu – Food Ordering System – Table Reservation
risk 0.40cvss 6.1epss 0.00
The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes…
CVE-2024-21263MedOct 15, 2024
Oracle Corporation
VM Virtualbox
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2024-21202MedOct 15, 2024
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21188MedJul 16, 2024
Oracle Corporation
Financial Services Revenue Management And Billing
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2024-21178MedJul 16, 2024
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21150MedJul 16, 2024
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.40cvss 6.1epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21133MedJul 16, 2024
Oracle Corporation
Reports Developer
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Servlet). Supported versions that are affected are 12.2.1.4.0 and 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21072MedApr 16, 2024
Oracle Corporation
Installed Base
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21065MedApr 16, 2024
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2024-21063MedApr 16, 2024
Oracle Corporation
Peoplesoft Enterprise Hcm Benefits Administration
risk 0.40cvss 6.1epss 0.00
Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft (component: Benefits Administration). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2024-21046MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21045MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21044MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21043MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21042MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21041MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21040MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21039MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21038MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21037MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2024-21036MedApr 16, 2024
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.40cvss 6.1epss 0.00
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

Page 107 of 270