Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-2840	Oracle Corporation Flexcube Universal Banking	Med	0.37	5.7	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2018-3274	Oracle Corporation Solaris	Med	0.37	5.7	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3263	Oracle Corporation Solaris	Med	0.37	5.6	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-3180	Microfocus Xp7 Command View	Med	0.37	5.6	0.03	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-2924	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.37	5.7	0.00	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-3693	Fujitsu M12 1 Firmware	Med	0.37	5.6	0.09	Jul 10, 2018	Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2017-10389	Oracle Corporation Hospitality Suite8	Med	0.37	5.7	0.00	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10051	Oracle Corporation Outside In Technology	Med	0.37	5.7	0.01	Oct 19, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2017-3597	Oracle Corporation Webcenter Sites	Med	0.37	5.7	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3292	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.37	5.7	0.02	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-3276	Oracle Corporation Solaris	Med	0.37	5.7	0.00	Jan 27, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2017-3265	MariaDB MariaDB	Med	0.37	5.6	0.01	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to…
CVE-2016-5602	Oracle Corporation Data Integrator	Med	0.37	5.7	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.
CVE-2016-5598	Oracle Corporation Connector\/python	Med	0.37	5.6	0.02	Oct 25, 2016	Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.
CVE-2016-5537	Oracle Corporation Netbeans	Med	0.37	5.7	0.01	Oct 25, 2016	Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party…
CVE-2016-3472	Oracle Corporation Siebel CRM	Med	0.37	5.7	0.02	Jul 21, 2016	Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server.
CVE-2016-3464	Oracle Corporation Flexcube Direct Banking	Med	0.37	5.7	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts.
CVE-2014-0207	PHP PHP	Med	0.37	6.5	0.17	Jul 9, 2014	The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.
CVE-2026-83279	Oracle Corporation Agile Plm Mcad Connector	Med	0.36	5.5	0.00	Sep 15, 2026	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM…
CVE-2026-83274	Oracle Corporation Agile Plm Mcad Connector	Med	0.36	5.5	0.00	Sep 15, 2026	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM…
CVE-2026-71151	Oracle Corporation VM Virtualbox	Med	0.36	5.6	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-71073	Oracle Corporation Mysql Connectors	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to…
CVE-2026-71033	Oracle Corporation Commerce Guided Search	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-70841	Oracle Corporation Hyperion	Med	0.36	5.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70836	Oracle Corporation Hyperion	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-62573	Oracle Corporation Hyperion	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-62564	Oracle Corporation Hyperion Infrastructure Technology	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-62553	Oracle Corporation Hyperion	Med	0.36	5.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-61298	Oracle Corporation Enterprise Manager Base Platform	Med	0.36	5.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2026-60630	Oracle Corporation Apex	Med	0.36	5.5	0.00	Jul 21, 2026	Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle APEX. …
CVE-2026-60607	Oracle Corporation Peoplesoft Enterprise Cs Financial Aid	Med	0.36	5.5	0.00	Jul 21, 2026	Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-60595	Oracle Corporation Peoplesoft Enterprise Fin Pay\/bill Management	Med	0.36	5.5	0.00	Jul 21, 2026	Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-47062	Oracle Corporation VM Virtualbox	Med	0.36	5.5	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-47061	Oracle Corporation Database Server	Med	0.36	5.6	0.00	Jul 21, 2026	Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to…
CVE-2026-47053	Oracle Corporation VM Virtualbox	Med	0.36	5.6	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-47044	Oracle Corporation VM Virtualbox	Med	0.36	5.5	0.00	Jul 21, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-34302	Oracle Corporation Workflow	Med	0.36	5.5	0.00	Apr 21, 2026	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-21991	Oracle Corporation dtrace	Med	0.36	5.5	0.00	Mar 16, 2026	A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
CVE-2025-53070	Oracle Corporation Solaris	Med	0.36	5.5	0.00	Oct 21, 2025	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2025-53061	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.36	5.5	0.00	Oct 21, 2025	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2025-53054	Oracle Corporation Mysql Server	Med	0.36	5.5	0.00	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-53053	Oracle Corporation Mysql Server	Med	0.36	5.5	0.00	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols…
CVE-2025-50085	Oracle Corporation MySQL	Med	0.36	5.5	0.00	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-30739	Oracle Corporation CRM Technical Foundation	Med	0.36	5.5	0.00	Jul 15, 2025	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2025-30729	Oracle Corporation Communications Order And Service Management	Med	0.36	5.5	0.00	Apr 15, 2025	Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2025-30698	Oracle Corporation Jdk	Med	0.36	5.6	0.01	Apr 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14,…
CVE-2025-30695	Oracle Corporation Mysql Server	Med	0.36	5.5	0.01	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-30693	Oracle Corporation Mysql Server	Med	0.36	5.5	0.01	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-21559	Oracle Corporation Mysql Server	Med	0.36	5.5	0.01	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2025-21555	Oracle Corporation Mysql Server	Med	0.36	5.5	0.01	Jan 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…

CVE-2019-2840MedJul 23, 2019
Oracle Corporation
Flexcube Universal Banking
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2018-3274MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.37cvss 5.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3263MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.37cvss 5.6epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-3180MedOct 17, 2018
Microfocus
Xp7 Command View
risk 0.37cvss 5.6epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-2924MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-3693MedJul 10, 2018
Fujitsu
M12 1 Firmware
risk 0.37cvss 5.6epss 0.09
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2017-10389MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10051MedOct 19, 2017
Oracle Corporation
Outside In Technology
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2017-3597MedApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.37cvss 5.7epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3292MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.37cvss 5.7epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-3276MedJan 27, 2017
Oracle Corporation
Solaris
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2017-3265MedJan 27, 2017
MariaDB
MariaDB
risk 0.37cvss 5.6epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to…
CVE-2016-5602MedOct 25, 2016
Oracle Corporation
Data Integrator
risk 0.37cvss 5.7epss 0.02
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.
CVE-2016-5598MedOct 25, 2016
Oracle Corporation
Connector\/python
risk 0.37cvss 5.6epss 0.02
Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.
CVE-2016-5537MedOct 25, 2016
Oracle Corporation
Netbeans
risk 0.37cvss 5.7epss 0.01
Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party…
CVE-2016-3472MedJul 21, 2016
Oracle Corporation
Siebel CRM
risk 0.37cvss 5.7epss 0.02
Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server.
CVE-2016-3464MedApr 21, 2016
Oracle Corporation
Flexcube Direct Banking
risk 0.37cvss 5.7epss 0.01
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts.
CVE-2014-0207MedJul 9, 2014
PHP
PHP
risk 0.37cvss 6.5epss 0.17
The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.
CVE-2026-83279MedSep 15, 2026
Oracle Corporation
Agile Plm Mcad Connector
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM…
CVE-2026-83274MedSep 15, 2026
Oracle Corporation
Agile Plm Mcad Connector
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM…
CVE-2026-71151MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.36cvss 5.6epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-71073MedAug 18, 2026
Oracle Corporation
Mysql Connectors
risk 0.36cvss 5.5epss 0.00
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to…
CVE-2026-71033MedAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-70841MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.36cvss 5.6epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70836MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-62573MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-62564MedAug 18, 2026
Oracle Corporation
Hyperion Infrastructure Technology
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-62553MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2026-61298MedAug 18, 2026
Oracle Corporation
Enterprise Manager Base Platform
risk 0.36cvss 5.6epss 0.00
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2026-60630MedJul 21, 2026
Oracle Corporation
Apex
risk 0.36cvss 5.5epss 0.00
Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle APEX. …
CVE-2026-60607MedJul 21, 2026
Oracle Corporation
Peoplesoft Enterprise Cs Financial Aid
risk 0.36cvss 5.5epss 0.00
Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-60595MedJul 21, 2026
Oracle Corporation
Peoplesoft Enterprise Fin Pay\/bill Management
risk 0.36cvss 5.5epss 0.00
Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-47062MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-47061MedJul 21, 2026
Oracle Corporation
Database Server
risk 0.36cvss 5.6epss 0.00
Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to…
CVE-2026-47053MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.36cvss 5.6epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-47044MedJul 21, 2026
Oracle Corporation
VM Virtualbox
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…
CVE-2026-34302MedApr 21, 2026
Oracle Corporation
Workflow
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-21991MedMar 16, 2026
Oracle Corporation
dtrace
risk 0.36cvss 5.5epss 0.00
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
CVE-2025-53070MedOct 21, 2025
Oracle Corporation
Solaris
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise…
CVE-2025-53061MedOct 21, 2025
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.36cvss 5.5epss 0.00
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2025-53054MedOct 21, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.00
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-53053MedOct 21, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.00
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols…
CVE-2025-50085MedJul 15, 2025
Oracle Corporation
MySQL
risk 0.36cvss 5.5epss 0.00
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-30739MedJul 15, 2025
Oracle Corporation
CRM Technical Foundation
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2025-30729MedApr 15, 2025
Oracle Corporation
Communications Order And Service Management
risk 0.36cvss 5.5epss 0.00
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2025-30698MedApr 15, 2025
Oracle Corporation
Jdk
risk 0.36cvss 5.6epss 0.01
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14,…
CVE-2025-30695MedApr 15, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.01
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-30693MedApr 15, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.01
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2025-21559MedJan 21, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.01
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…
CVE-2025-21555MedJan 21, 2025
Oracle Corporation
Mysql Server
risk 0.36cvss 5.5epss 0.01
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…

Page 121 of 270