VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk
  • CVE-2023-21939MedApr 18, 2023
    NetApp
    Oncommand Insight
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1.…

  • CVE-2023-21936MedApr 18, 2023
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior to 9.2.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2023-21925MedApr 18, 2023
    Oracle Corporation
    Health Sciences Inform
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2023-21921MedApr 18, 2023
    Oracle Corporation
    Health Sciences Inform
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2022-4657MedFeb 6, 2023
    WordPress
    Restaurant Menu
    risk 0.35cvss 5.4epss 0.01

    The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site…

  • CVE-2023-21892MedJan 18, 2023
    Oracle Corporation
    Business Intelligence
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2023-21891MedJan 18, 2023
    Oracle Corporation
    Business Intelligence
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2023-21888MedJan 18, 2023
    Oracle Corporation
    Primavera Gateway
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI). Supported versions that are affected are 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 and 21.12.0-21.12.8. Easily exploitable vulnerability allows low privileged…

  • CVE-2023-21887MedJan 18, 2023
    Oracle Corporation
    MySQL
    risk 0.35cvss 4.9epss 0.43

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…

  • CVE-2023-21861MedJan 18, 2023
    Oracle Corporation
    Business Intelligence
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2023-21847MedJan 18, 2023
    Oracle Corporation
    Web Applications Desktop Integrator
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2023-21845MedJan 18, 2023
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2023-21844MedJan 18, 2023
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2023-21835MedJan 18, 2023
    Azul
    Zulu
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily…

  • CVE-2023-21830MedJan 18, 2023
    Azul
    Zulu
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable…

  • CVE-2022-39420MedOct 18, 2022
    Oracle Corporation
    Transportation Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2022-39405MedOct 18, 2022
    Oracle Corporation
    Access Manager
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21629MedOct 18, 2022
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2022-21628MedOct 18, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7,…

  • CVE-2022-21626MedOct 18, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily…

  • CVE-2022-21618MedOct 18, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability…

  • CVE-2022-21602MedOct 18, 2022
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.58, 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2022-21597MedOct 18, 2022
    Oracle Corporation
    GraalVM Enterprise Edition
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2022-21591MedOct 18, 2022
    Oracle Corporation
    Transportation Management
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2022-21574MedJul 19, 2022
    Oracle Corporation
    Communications Billing And Revenue Management
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2022-21572MedJul 19, 2022
    Oracle Corporation
    Communications Billing And Revenue Management
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2022-21564MedJul 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3,…

  • CVE-2022-21560MedJul 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2022-21549MedJul 19, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability…

  • CVE-2022-21545MedJul 19, 2022
    Oracle Corporation
    Irecruitment
    risk 0.35cvss 5.3epss 0.01

    Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Candidate Self Service Registration). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21540MedJul 19, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 5.3epss 0.04

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and…

  • CVE-2020-35163MedJul 11, 2022
    Dell
    Bsafe Micro Edition Suite
    risk 0.35cvss 5.3epss 0.01

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.

  • CVE-2020-29508MedJul 11, 2022
    Dell
    Bsafe Micro Edition Suite
    risk 0.35cvss 5.3epss 0.01

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

  • CVE-2020-29507MedJul 11, 2022
    Dell
    Bsafe Micro Edition Suite
    risk 0.35cvss 5.3epss 0.01

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.

  • CVE-2022-24891MedApr 27, 2022
    Trustwave
    Enterprise Security API
    risk 0.35cvss 5.4epss 0.02

    ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the…

  • CVE-2021-41041MedApr 27, 2022
    Eclipse
    Openj9
    risk 0.35cvss 5.3epss 0.01

    In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.

  • CVE-2022-21496MedApr 19, 2022
    NetApp
    Hci Management Node
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily…

  • CVE-2022-21481MedApr 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Financial Gateway). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2022-21477MedApr 19, 2022
    Oracle Corporation
    Applications Framework
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2022-21450MedApr 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Prtl Interaction Hub
    risk 0.35cvss 5.4epss 0.00

    Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: My Links). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2022-21434MedApr 19, 2022
    NetApp
    Oncommand Insight
    risk 0.35cvss 5.3epss 0.02

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2.…

  • CVE-2022-21426MedApr 19, 2022
    NetApp
    Oncommand Insight
    risk 0.35cvss 5.3epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily…

  • CVE-2022-21411MedApr 19, 2022
    Oracle Corporation
    Database Server
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access…

  • CVE-2022-24329MedFeb 25, 2022
    Jetbrains
    Kotlin
    risk 0.35cvss 5.3epss 0.02

    In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

  • CVE-2021-44533MedFeb 24, 2022
    Node.js
    Node.js
    risk 0.35cvss 5.3epss 0.09

    Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative…

  • CVE-2021-44532MedFeb 24, 2022
    Node.js
    Node.js
    risk 0.35cvss 5.3epss 0.10

    Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name…

  • CVE-2021-22570MedJan 26, 2022
    Fedoraproject
    Fedora
    risk 0.35cvss 6.5epss 0.03

    Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We…

  • CVE-2022-21400MedJan 19, 2022
    Oracle Communications
    Oracle Communications Operations Monitor
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2022-21398MedJan 19, 2022
    Oracle Corporation
    Communications Operations Monitor
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2022-21397MedJan 19, 2022
    Oracle Corporation
    Communications Operations Monitor
    risk 0.35cvss 5.4epss 0.01

    Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access…

Page 128 of 270