Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-3498	Sun Corporation Java SE	Med	0.35	5.3	0.05	Jul 21, 2016	Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
CVE-2016-3445	Oracle Corporation Weblogic Server	Med	0.35	5.3	0.04	Jul 21, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.
CVE-2016-3433	Oracle Corporation Business Intelligence	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration.
CVE-2016-3432	Oracle Corporation Bi Publisher	Med	0.35	5.4	0.01	Jul 21, 2016	Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.
CVE-2016-3460	Oracle Corporation Peoplesoft Enterprise Human Capital Management Eperformance	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance.
CVE-2016-3442	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.
CVE-2016-3423	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than…
CVE-2016-3417	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality.
CVE-2016-0698	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than…
CVE-2016-0696	Oracle Corporation Weblogic Server	Med	0.35	5.4	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVE-2016-0685	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing.
CVE-2016-0683	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework.
CVE-2016-0680	Oracle Corporation Peoplesoft Enterprise Scm	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.
CVE-2016-0673	Oracle Corporation Siebel UI Framework	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI.
CVE-2016-0468	Oracle Corporation Business Intelligence	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-0408	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.35	5.4	0.01	Apr 21, 2016	Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.
CVE-2015-4000	OpenSSL Project OpenSSL	Low	0.35	3.7	1.00	May 21, 2015	The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by…
CVE-2013-0375	MariaDB MariaDB	Med	0.35	5.4	0.02	Jan 17, 2013	Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
CVE-2026-87267	Oracle Corporation VM Virtualbox	Med	0.34	5.3	0.00	Sep 15, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. …
CVE-2026-83480	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Sep 15, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful…
CVE-2026-83459	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Sep 15, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-83458	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Sep 15, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of…
CVE-2026-83109	Oracle Corporation Forms	Med	0.34	5.3	0.00	Sep 15, 2026	Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-73932	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73910	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73906	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73900	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73899	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73895	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73889	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73888	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73877	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73872	Oracle Corporation Fusion Middleware	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73871	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71161	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71157	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-71156	Oracle Corporation Helidon	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71148	Oracle Corporation Hyperion	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-71132	Oracle Corporation VM Virtualbox	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-71120	Oracle Corporation Hyperion	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-71108	Oracle Corporation Hyperionfinancialmanagement	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-71100	Oracle Corporation Database Server	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. …
CVE-2026-71087	Oracle Corporation Agile Plm Mcad Connector	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile…
CVE-2026-71077	Oracle Corporation Agile Plm Mcad Connector	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment…
CVE-2026-71076	Oracle Corporation Agile Plm Mcad Connector	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile…
CVE-2026-70974	Oracle Corporation Hyperion	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-70912	Oracle Corporation Hyperion	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70911	Oracle Corporation Hyperionfinancialmanagement	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-70907	Oracle Corporation Graalvm For Jdk	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20…
CVE-2026-70784	Oracle Corporation Hyperion Financial Reporting	Med	0.34	5.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…

CVE-2016-3498MedJul 21, 2016
Sun Corporation
Java SE
risk 0.35cvss 5.3epss 0.05
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
CVE-2016-3445MedJul 21, 2016
Oracle Corporation
Weblogic Server
risk 0.35cvss 5.3epss 0.04
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488.
CVE-2016-3433MedJul 21, 2016
Oracle Corporation
Business Intelligence
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration.
CVE-2016-3432MedJul 21, 2016
Oracle Corporation
Bi Publisher
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.
CVE-2016-3460MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Human Capital Management Eperformance
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to ePerformance.
CVE-2016-3442MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal.
CVE-2016-3423MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than…
CVE-2016-3417MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality.
CVE-2016-0698MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than…
CVE-2016-0696MedApr 21, 2016
Oracle Corporation
Weblogic Server
risk 0.35cvss 5.4epss 0.02
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
CVE-2016-0685MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Processing.
CVE-2016-0683MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Search Framework.
CVE-2016-0680MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Scm
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Services Procurement.
CVE-2016-0673MedApr 21, 2016
Oracle Corporation
Siebel UI Framework
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to UIF Open UI.
CVE-2016-0468MedApr 21, 2016
Oracle Corporation
Business Intelligence
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-0408MedApr 21, 2016
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.
CVE-2015-4000LowMay 21, 2015
OpenSSL Project
OpenSSL
risk 0.35cvss 3.7epss 1.00
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by…
CVE-2013-0375MedJan 17, 2013
MariaDB
MariaDB
risk 0.35cvss 5.4epss 0.02
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
CVE-2026-87267MedSep 15, 2026
Oracle Corporation
VM Virtualbox
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. …
CVE-2026-83480MedSep 15, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful…
CVE-2026-83459MedSep 15, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-83458MedSep 15, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of…
CVE-2026-83109MedSep 15, 2026
Oracle Corporation
Forms
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-73932MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73910MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73906MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73900MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73899MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73895MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73889MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73888MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73877MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73872MedAug 18, 2026
Oracle Corporation
Fusion Middleware
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-73871MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71161MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71157MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-71156MedAug 18, 2026
Oracle Corporation
Helidon
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. …
CVE-2026-71148MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-71132MedAug 18, 2026
Oracle Corporation
VM Virtualbox
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2026-71120MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-71108MedAug 18, 2026
Oracle Corporation
Hyperionfinancialmanagement
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-71100MedAug 18, 2026
Oracle Corporation
Database Server
risk 0.34cvss 5.3epss 0.00
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. …
CVE-2026-71087MedAug 18, 2026
Oracle Corporation
Agile Plm Mcad Connector
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile…
CVE-2026-71077MedAug 18, 2026
Oracle Corporation
Agile Plm Mcad Connector
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment…
CVE-2026-71076MedAug 18, 2026
Oracle Corporation
Agile Plm Mcad Connector
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile…
CVE-2026-70974MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-70912MedAug 18, 2026
Oracle Corporation
Hyperion
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2026-70911MedAug 18, 2026
Oracle Corporation
Hyperionfinancialmanagement
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-70907MedAug 18, 2026
Oracle Corporation
Graalvm For Jdk
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20…
CVE-2026-70784MedAug 18, 2026
Oracle Corporation
Hyperion Financial Reporting
risk 0.34cvss 5.3epss 0.00
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…

Page 138 of 270