VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2020-2777MedApr 15, 2020
    Oracle Corporation
    Hyperionfinancialmanagement
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion…

  • CVE-2020-2772MedApr 15, 2020
    Oracle Corporation
    Human Resources
    risk 0.27cvss 4.1epss 0.01

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Absence Recording, Maintenance). Supported versions that are affected are 12.2.6-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2020-2599MedJan 15, 2020
    Oracle Corporation
    Hospitality Cruise Materials Management
    risk 0.27cvss 4.2epss 0.00

    Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications (component: MMS All). The supported version that is affected is 7.30.567. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality…

  • CVE-2020-2563MedJan 15, 2020
    Oracle Corporation
    Hyperion Financial Close Management
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…

  • CVE-2020-2527MedJan 15, 2020
    Oracle Corporation
    Database Server
    risk 0.27cvss 4.1epss 0.01

    Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via…

  • CVE-2019-2996MedOct 16, 2019
    NetApp
    E Series Santricity Storage Manager
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2019-2959MedOct 16, 2019
    Oracle Corporation
    Hyperion Financial Reporting
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion…

  • CVE-2019-2797MedJul 23, 2019
    Oracle Corporation
    MySQL
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical…

  • CVE-2019-2787MedJul 23, 2019
    Oracle Corporation
    Solaris
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Automount). Supported versions that are affected are 11.4 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via NFS to compromise Oracle…

  • CVE-2019-2779MedJul 23, 2019
    Oracle Corporation
    Siebel CRM
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM (subcomponent: Email). Supported versions that are affected are 19.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…

  • CVE-2019-2535MedJan 16, 2019
    NetApp
    Snapcenter
    risk 0.27cvss 4.1epss 0.00

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes…

  • CVE-2018-5407MedNov 15, 2018
    OpenSSL Project
    OpenSSL
    risk 0.27cvss 4.7epss 0.03

    Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

  • CVE-2018-2773MedApr 19, 2018
    Oracle Corporation
    MySQL
    risk 0.27cvss 4.1epss 0.00

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

  • CVE-2018-2563MedApr 19, 2018
    Oracle Corporation
    Solaris
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Solaris.…

  • CVE-2017-10268MedOct 19, 2017
    MariaDB
    MariaDB
    risk 0.27cvss 4.1epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon…

  • CVE-2017-3652MedAug 8, 2017
    Oracle Corporation
    MySQL
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access…

  • CVE-2017-3509MedApr 24, 2017
    Oracle Corporation
    Java Se
    risk 0.27cvss 4.2epss 0.02

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2017-3477MedApr 24, 2017
    Oracle Corporation
    Flexcube Private Banking
    risk 0.27cvss 4.2epss 0.01

    Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network…

  • CVE-2016-8313MedJan 27, 2017
    Oracle Corporation
    Flexcube Private Banking
    risk 0.27cvss 4.1epss 0.01

    Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker…

  • CVE-2016-8292MedOct 25, 2016
    Oracle Corporation
    PeopleSoft Enterprise HRMS Talent Acquisition Manager
    risk 0.27cvss 4.2epss 0.01

    Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager.

  • CVE-2016-5559MedOct 25, 2016
    Oracle Corporation
    Solaris
    risk 0.27cvss 4.1epss 0.00

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.

  • CVE-2016-5504MedOct 25, 2016
    Oracle Corporation
    Agile Product Lifecycle Management For Process
    risk 0.27cvss 4.1epss 0.00

    Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.1.0.4, 6.1.1.6, and 6.2.0.0 allows local users to affect confidentiality via vectors related to Supplier Portal.

  • CVE-2016-5493MedOct 25, 2016
    Oracle Corporation
    Flexcube Private Banking
    risk 0.27cvss 4.2epss 0.01

    Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

  • CVE-2016-5464MedJul 21, 2016
    Oracle Corporation
    Siebel UI Framework
    risk 0.27cvss 4.1epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5463.

  • CVE-2016-5463MedJul 21, 2016
    Oracle Corporation
    Siebel UI Framework
    risk 0.27cvss 4.1epss 0.01

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related to SWSE Server, a different vulnerability than CVE-2016-5464.

  • CVE-2016-0668MedApr 21, 2016
    MariaDB
    MariaDB
    risk 0.27cvss 4.1epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

  • CVE-2026-70917MedAug 18, 2026
    Oracle Corporation
    Hyperionfinancialmanagement
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…

  • CVE-2026-70916MedAug 18, 2026
    Oracle Corporation
    Hyperionfinancialmanagement
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…

  • CVE-2026-70719MedAug 18, 2026
    Oracle Corporation
    Hyperion
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…

  • CVE-2026-62584MedAug 18, 2026
    Oracle Corporation
    Hyperion Infrastructure Technology
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the…

  • CVE-2025-50072MedJul 15, 2025
    Oracle Corporation
    Weblogic Server
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure…

  • CVE-2025-30721MedApr 15, 2025
    Oracle Corporation
    Mysql Server
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where…

  • CVE-2024-21100MedApr 16, 2024
    Oracle Corporation
    Commerce Platform
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2023-21900MedJan 18, 2023
    Oracle Corporation
    Solaris
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. …

  • CVE-2022-21494MedApr 19, 2022
    Oracle Corporation
    Solaris
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle…

  • CVE-2021-2152MedApr 22, 2021
    Oracle Corporation
    Business Intelligence
    risk 0.26cvss 4.0epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high…

  • CVE-2021-3448MedApr 8, 2021
    Thekelleys
    Dnsmasq
    risk 0.26cvss 4.0epss 0.02

    A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the…

  • CVE-2020-2581MedJan 15, 2020
    Oracle Corporation
    GraalVM Enterprise Edition
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…

  • CVE-2019-2941MedOct 16, 2019
    Oracle Corporation
    Hyperion Profitability And Cost Management
    risk 0.26cvss 4.0epss 0.01

    Vulnerability in the Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Modeling). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…

  • CVE-2019-2739MedJul 23, 2019
    Fedoraproject
    Fedora
    risk 0.26cvss 5.1epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon…

  • CVE-2019-2569MedJul 23, 2019
    Oracle Corporation
    Database Server
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where…

  • CVE-2019-2545MedJan 16, 2019
    Oracle Corporation
    Solaris
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris…

  • CVE-2019-2544MedJan 16, 2019
    Oracle Corporation
    Solaris
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris…

  • CVE-2018-3005MedJul 18, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…

  • CVE-2017-10317MedOct 19, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure…

  • CVE-2017-10295MedOct 19, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.26cvss 4.0epss 0.02

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows…

  • CVE-2017-10220MedAug 8, 2017
    Oracle Corporation
    Hospitality Applications
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…

  • CVE-2017-10213MedAug 8, 2017
    Oracle Corporation
    Hospitality Suite8
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality…

  • CVE-2017-3318MedJan 27, 2017
    MariaDB
    MariaDB
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2017-3317MedJan 27, 2017
    MariaDB
    MariaDB
    risk 0.26cvss 4.0epss 0.00

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

Page 168 of 270