VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2022-21606MedOct 18, 2022
    Oracle Corporation
    Database Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Services for Microsoft Transaction Server component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Services…

  • CVE-2022-21385MedAug 29, 2022
    Oracle Corporation
    Linux
    risk 0.40cvss 6.2epss 0.00

    A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

  • CVE-2022-21520MedJul 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21492MedApr 19, 2022
    Oracle Corporation
    Business Intelligence
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2022-21480MedApr 19, 2022
    Oracle Corporation
    Transportation Management
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: User Interface). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21470MedApr 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21468MedApr 19, 2022
    Oracle Corporation
    Applications Framework
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported versions that are affected are 12.2.4-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2022-21458MedApr 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2022-21456MedApr 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Navigation Pages, Portal, Query). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2022-21453MedApr 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21448MedApr 19, 2022
    Oracle Corporation
    Business Intelligence
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2022-21419MedApr 19, 2022
    Oracle Corporation
    Business Intelligence
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.5.0.0.0 and 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2022-21409MedApr 19, 2022
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD…

  • CVE-2022-21386MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2022-21373MedJan 19, 2022
    Oracle Corporation
    Partner Management
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21369MedJan 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21361MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21359MedJan 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21354MedJan 19, 2022
    Oracle Corporation
    Istore
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore.…

  • CVE-2022-21272MedJan 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21269MedJan 19, 2022
    Oracle Corporation
    Primavera Portfolio Management
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows…

  • CVE-2022-21262MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21261MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21260MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21259MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21258MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic…

  • CVE-2022-21257MedJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-35665MedOct 20, 2021
    Oracle Corporation
    Hyperion Financial Reporting
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…

  • CVE-2021-35595MedOct 20, 2021
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-35580MedOct 20, 2021
    Oracle Corporation
    Applications Manager
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-35568MedOct 20, 2021
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-32827MedAug 16, 2021
    Pico Server
    Mockserver
    risk 0.40cvss 6.1epss 0.02

    MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine.…

  • CVE-2021-2408MedJul 21, 2021
    Oracle Corporation
    Peoplesoft Enterprise Pt Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). The supported version that is affected is 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-2375MedJul 21, 2021
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD…

  • CVE-2021-2338MedJul 21, 2021
    Oracle Corporation
    Siebel CRM
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-2462MedJul 21, 2021
    Oracle Corporation
    Commerce Service Center
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2021-35043MedJul 19, 2021
    Antisamy Project
    Antisamy
    risk 0.40cvss 6.1epss 0.02

    OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

  • CVE-2021-3314MedJun 25, 2021
    Oracle Corporation
    Glassfish Server
    risk 0.40cvss 6.1epss 0.01

    Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common…

  • CVE-2021-2307MedApr 22, 2021
    NetApp
    Snapcenter
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL…

  • CVE-2021-2216MedApr 22, 2021
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-2192MedApr 22, 2021
    Oracle Corporation
    Solaris
    risk 0.40cvss 6.1epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle…

  • CVE-2021-2142MedApr 22, 2021
    Oracle Corporation
    Weblogic Server
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic…

  • CVE-2021-2140MedApr 22, 2021
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Rules Framework). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2021-2053MedApr 22, 2021
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-28168MedApr 22, 2021
    Eclipse
    Jersey
    risk 0.40cvss 6.2epss 0.01

    Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the…

  • CVE-2020-27223MedFeb 26, 2021
    Eclipse
    Jetty
    risk 0.40cvss 5.2epss 0.78

    In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU…

  • CVE-2021-2043MedJan 20, 2021
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-2040MedJan 20, 2021
    Oracle Corporation
    Argus Safety
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form). The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-27193MedNov 12, 2020
    Fckeditor
    Fckeditor
    risk 0.40cvss 6.1epss 0.02

    A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

  • CVE-2020-14854MedOct 21, 2020
    Oracle Corporation
    Hyperion Infrastructure Technology
    risk 0.40cvss 6.1epss 0.01

    Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…

Page 109 of 270