VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk
  • CVE-2026-46896CriJun 17, 2026
    Oracle Corporation
    Enterprise Command Center Framework
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are V15 and V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-46892CriJun 17, 2026
    Oracle Corporation
    Jd Edwards Enterpriseone Human Resources Management
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-46875CriJun 17, 2026
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deployment Library). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via…

  • CVE-2026-46872CriJun 17, 2026
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.59cvss 9.0epss 0.00

    Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to…

  • CVE-2026-46858CriJun 17, 2026
    Oracle Corporation
    Application Performance Management
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2026-46809CriJun 17, 2026
    Oracle Corporation
    Webcenter Sites
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-46784CriJun 17, 2026
    Oracle Corporation
    Webcenter Content
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-46777CriJun 17, 2026
    Oracle Corporation
    Webcenter Content
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-35320CriJun 17, 2026
    Oracle Corporation
    Webcenter Content
    risk 0.59cvss 9.0epss 0.00

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-35298CriJun 17, 2026
    Oracle Corporation
    Weblogic Server
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP…

  • CVE-2026-35270CriJun 17, 2026
    Oracle Corporation
    Webcenter Content
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-46833CriMay 28, 2026
    Oracle Corporation
    Database Server
    risk 0.59cvss 9.0epss 0.00

    Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. While the vulnerability is…

  • CVE-2026-46819CriMay 28, 2026
    Oracle Corporation
    Oracle Internet Procurement Connector
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2026-34287CriApr 21, 2026
    Oracle Corporation
    Identity Manager Connector
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…

  • CVE-2026-34286CriApr 21, 2026
    Oracle Corporation
    Identity Manager Connector
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…

  • CVE-2026-34285CriApr 21, 2026
    Oracle Corporation
    Identity Manager Connector
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…

  • CVE-2026-34279CriApr 21, 2026
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.59cvss 9.1epss 0.00

    Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via…

  • CVE-2025-50067CriJul 15, 2025
    Oracle Corporation
    Application Express
    risk 0.59cvss 9.0epss 0.00

    Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions that are affected are 24.2.4 and 24.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application…

  • CVE-2025-21547CriJan 21, 2025
    Oracle Corporation
    Hospitality Opera 5
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.19.20, 5.6.25.8, 5.6.26.6 and 5.6.27.1. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2024-21172CriOct 15, 2024
    Oracle Corporation
    Hospitality Opera 5
    risk 0.59cvss 9.0epss 0.01

    Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.19.19, 5.6.25.8 and 5.6.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2024-21071CriApr 16, 2024
    Oracle Corporation
    Workflow
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…

  • CVE-2023-21975CriJul 18, 2023
    Oracle Corporation
    Application Express
    risk 0.59cvss 9.0epss 0.01

    Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account). Supported versions that are affected are Application Express Customers Plugin: 18.2-22.2. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2023-21974CriJul 18, 2023
    Oracle Corporation
    Application Express
    risk 0.59cvss 9.0epss 0.01

    Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account). Supported versions that are affected are Application Express Team Calendar Plugin: 18.2-22.1. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-35169CriJul 11, 2022
    Dell
    Bsafe Micro Edition Suite
    risk 0.59cvss 9.1epss 0.01

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.

  • CVE-2022-21371HigJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.59cvss 7.5epss 0.93

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2021-2355CriJul 21, 2021
    Oracle Corporation
    Marketing
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2021-2320CriApr 22, 2021
    Oracle Corporation
    Cloud Infrastructure Storage Gateway
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via…

  • CVE-2021-2319CriApr 22, 2021
    Oracle Corporation
    Cloud Infrastructure Storage Gateway
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via…

  • CVE-2021-2318CriApr 22, 2021
    Oracle Corporation
    Cloud Infrastructure Storage Gateway
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via…

  • CVE-2021-2253CriApr 22, 2021
    Oracle Corporation
    Advanced Supply Chain Planning
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2205CriApr 22, 2021
    Oracle Corporation
    Marketing
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.7-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-2200CriApr 22, 2021
    Oracle Corporation
    Applications Framework
    risk 0.59cvss 9.1epss 0.01

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2020-13936HigMar 10, 2021
    Apache
    Velocity Engine
    risk 0.59cvss 8.8epss 0.23

    An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity…

  • CVE-2021-2101CriJan 20, 2021
    Oracle Corporation
    One To One Fulfillment
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2021-2100CriJan 20, 2021
    Oracle Corporation
    One To One Fulfillment
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14876CriOct 21, 2020
    Oracle Corporation
    Trade Management
    risk 0.59cvss 9.1epss 0.03

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14875CriOct 21, 2020
    Oracle Corporation
    Marketing
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-14805CriOct 21, 2020
    Oracle Corporation
    Secure Enterprise Search
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker…

  • CVE-2020-14665CriJul 15, 2020
    Oracle Corporation
    Trade Management
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-14658CriJul 15, 2020
    Oracle Corporation
    Marketing
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2020-14599CriJul 15, 2020
    Oracle Corporation
    CRM Gateway for Mobile Devices
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14598CriJul 15, 2020
    Oracle Corporation
    CRM Gateway for Mobile Devices
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2871HigApr 15, 2020
    Oracle Corporation
    Advanced Outbound Telephony
    risk 0.59cvss 8.2epss 0.66

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2854HigApr 15, 2020
    Oracle Corporation
    Advanced Outbound Telephony
    risk 0.59cvss 8.2epss 0.66

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-2852HigApr 15, 2020
    Oracle Corporation
    Advanced Outbound Telephony
    risk 0.59cvss 8.2epss 0.66

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2019-17560CriMar 30, 2020
    Apache
    NetBeans
    risk 0.59cvss 9.1epss 0.02

    The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and…

  • CVE-2020-1953CriMar 13, 2020
    Apache
    Commons Configuration
    risk 0.59cvss 10.0epss 0.07

    Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this…

  • CVE-2020-8840CriFeb 10, 2020
    Fasterxml
    Jackson Databind
    risk 0.59cvss 9.8epss 0.27

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

  • CVE-2019-5063HigJan 3, 2020
    Opencv
    Opencv
    risk 0.59cvss 8.8epss 0.21

    An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a…

  • CVE-2019-2775CriJul 23, 2019
    Oracle Corporation
    Payments
    risk 0.59cvss 9.1epss 0.02

    Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

Page 16 of 270