Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-87285	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87283	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87282	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71137	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71135	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71128	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71127	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71115	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71114	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71013	Oracle Corporation Hyperion	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70726	Oracle Corporation Cash Management	Med	0.39	6.0	0.00	Aug 18, 2026	Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2026-60626	Oracle Corporation Jd Edwards Enterpriseone	Med	0.39	6.0	0.00	Jul 21, 2026	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD…
CVE-2026-47041	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-46877	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jun 17, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-46825	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jun 17, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-46768	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jun 17, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-35247	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-22003	Oracle Corporation GraalVM Enterprise Edition	Med	0.39	6.0	0.00	Apr 21, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u481 and 8u481-b50; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability…
CVE-2026-21985	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-21963	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jan 20, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-62592	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Oct 21, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-62591	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Oct 21, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-53030	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jul 15, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-53026	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jul 15, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-53025	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jul 15, 2025	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-21573	Oracle Corporation Financial Services Revenue Management And Billing	Med	0.39	6.0	0.00	Apr 15, 2025	Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 5.1.0.0.0, 6.1.0.0.0 and 7.0.0.0.0. Difficult to exploit vulnerability allows high…
CVE-2025-21551	Oracle Corporation Solaris	Med	0.39	6.0	0.00	Jan 21, 2025	Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2024-21273	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Oct 15, 2024	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21961	Oracle Corporation Hyperion Essbase Administration Services	Med	0.39	6.0	0.00	Jul 18, 2023	Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administration and EAS Console). The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to…
CVE-2023-22002	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 18, 2023	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21989	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Apr 18, 2023	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21908	Oracle Corporation Banking Virtual Account Management	Med	0.39	6.0	0.00	Apr 18, 2023	Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged…
CVE-2023-21907	Oracle Corporation Banking Virtual Account Management	Med	0.39	6.0	0.00	Apr 18, 2023	Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged…
CVE-2022-39423	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.01	Oct 18, 2022	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2022-21621	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Oct 18, 2022	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2022-21575	Oracle Corporation Webcenter Sites Support Tools	Med	0.39	6.0	0.01	Jul 19, 2022	Vulnerability in the Oracle WebCenter Sites Support Tools product of Oracle Fusion Middleware (component: User Interface). The supported version that is affected is Prior to 4.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2022-21541	Fedoraproject Fedora	Med	0.39	5.9	0.03	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and…
CVE-2022-21457	NetApp Snapcenter	Med	0.39	5.9	0.02	Apr 19, 2022	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2021-4160	OpenSSL Project OpenSSL	Med	0.39	5.9	0.04	Jan 28, 2022	There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing…
CVE-2021-45105	Apache Log4j	Med	0.39	5.9	1.00	Dec 18, 2021	Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is…
CVE-2021-41184	jQuery jQuery	Med	0.39	6.5	0.41	Oct 26, 2021	jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of`…
CVE-2021-35589	Oracle Corporation Solaris	Med	0.39	6.0	0.00	Oct 20, 2021	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device drivers). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2021-35550	Fedoraproject Fedora	Med	0.39	5.9	0.07	Oct 20, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows…
CVE-2021-2471	Quarkusio Quarkus	Med	0.39	5.9	0.07	Oct 20, 2021	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2021-41617	OpenSSH sshd	Hig	0.39	7.0	0.03	Sep 26, 2021	sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with…
CVE-2021-38153	Apache Kafka	Med	0.39	5.9	0.06	Sep 22, 2021	Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this…
CVE-2021-36221	Golang Go	Med	0.39	5.9	0.03	Aug 8, 2021	Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVE-2021-31799	Ruby Lang Rdoc	Hig	0.39	7.0	0.01	Jul 30, 2021	In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via \| and tags in a filename.
CVE-2021-2442	Oracle Corporation VM Virtualbox	Med	0.39	6.0	0.00	Jul 21, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2417	NetApp Oncommand Insight	Med	0.39	6.0	0.02	Jul 21, 2021	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…

CVE-2026-87285MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87283MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-87282MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71137MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71135MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71128MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71127MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71115MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71114MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-71013MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70726MedAug 18, 2026
Oracle Corporation
Cash Management
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2026-60626MedJul 21, 2026
Oracle Corporation
Jd Edwards Enterpriseone
risk 0.39cvss 6.0epss 0.00
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). The supported version that is affected is 9.2.26.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD…
CVE-2026-47041MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-46877MedJun 17, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-46825MedJun 17, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-46768MedJun 17, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-35247MedApr 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-22003MedApr 21, 2026
Oracle Corporation
GraalVM Enterprise Edition
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u481 and 8u481-b50; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability…
CVE-2026-21985MedJan 20, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-21963MedJan 20, 2026
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-62592MedOct 21, 2025
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-62591MedOct 21, 2025
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2025-53030MedJul 15, 2025
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-53026MedJul 15, 2025
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-53025MedJul 15, 2025
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2025-21573MedApr 15, 2025
Oracle Corporation
Financial Services Revenue Management And Billing
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 5.1.0.0.0, 6.1.0.0.0 and 7.0.0.0.0. Difficult to exploit vulnerability allows high…
CVE-2025-21551MedJan 21, 2025
Oracle Corporation
Solaris
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2024-21273MedOct 15, 2024
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21961MedJul 18, 2023
Oracle Corporation
Hyperion Essbase Administration Services
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administration and EAS Console). The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to…
CVE-2023-22002MedApr 18, 2023
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21989MedApr 18, 2023
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where…
CVE-2023-21908MedApr 18, 2023
Oracle Corporation
Banking Virtual Account Management
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged…
CVE-2023-21907MedApr 18, 2023
Oracle Corporation
Banking Virtual Account Management
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged…
CVE-2022-39423MedOct 18, 2022
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2022-21621MedOct 18, 2022
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2022-21575MedJul 19, 2022
Oracle Corporation
Webcenter Sites Support Tools
risk 0.39cvss 6.0epss 0.01
Vulnerability in the Oracle WebCenter Sites Support Tools product of Oracle Fusion Middleware (component: User Interface). The supported version that is affected is Prior to 4.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2022-21541MedJul 19, 2022
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.03
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and…
CVE-2022-21457MedApr 19, 2022
NetApp
Snapcenter
risk 0.39cvss 5.9epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2021-4160MedJan 28, 2022
OpenSSL Project
OpenSSL
risk 0.39cvss 5.9epss 0.04
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing…
CVE-2021-45105MedDec 18, 2021
Apache
Log4j
risk 0.39cvss 5.9epss 1.00
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is…
CVE-2021-41184MedOct 26, 2021
jQuery
jQuery
risk 0.39cvss 6.5epss 0.41
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of`…
CVE-2021-35589MedOct 20, 2021
Oracle Corporation
Solaris
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device drivers). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2021-35550MedOct 20, 2021
Fedoraproject
Fedora
risk 0.39cvss 5.9epss 0.07
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows…
CVE-2021-2471MedOct 20, 2021
Quarkusio
Quarkus
risk 0.39cvss 5.9epss 0.07
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2021-41617HigSep 26, 2021
OpenSSH
sshd
risk 0.39cvss 7.0epss 0.03
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with…
CVE-2021-38153MedSep 22, 2021
Apache
Kafka
risk 0.39cvss 5.9epss 0.06
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this…
CVE-2021-36221MedAug 8, 2021
Golang
Go
risk 0.39cvss 5.9epss 0.03
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVE-2021-31799HigJul 30, 2021
Ruby Lang
Rdoc
risk 0.39cvss 7.0epss 0.01
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVE-2021-2442MedJul 21, 2021
Oracle Corporation
VM Virtualbox
risk 0.39cvss 6.0epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2417MedJul 21, 2021
NetApp
Oncommand Insight
risk 0.39cvss 6.0epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…

Page 115 of 270