VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk
  • CVE-2020-2803HigApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.06

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2019-0190HigJan 30, 2019
    Apache
    HTTP Server
    risk 0.54cvss 7.5epss 0.59

    A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using…

  • CVE-2018-3209HigOct 17, 2018
    Oracle Corporation
    Java Se
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-3169HigOct 17, 2018
    Microfocus
    Xp7 Command View
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2018-2911HigOct 17, 2018
    Oracle Corporation
    Glassfish Server
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2018-2964HigJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2942HigJul 18, 2018
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2941HigJul 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2935HigJul 18, 2018
    Oracle Corporation
    Weblogic Server
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: JSF). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2892HigJul 18, 2018
    Oracle Corporation
    Solaris
    risk 0.54cvss 7.8epss 0.02

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2826HigApr 19, 2018
    NetApp
    Oncommand Insight
    risk 0.54cvss 8.3epss 0.05

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2825HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2814HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2018-2680HigJan 18, 2018
    Oracle Corporation
    Database Server
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM.…

  • CVE-2018-2639HigJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2638HigJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2018-2633HigJan 18, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.06

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…

  • CVE-2017-10146HigAug 8, 2017
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2017-10116HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows…

  • CVE-2017-10114HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java…

  • CVE-2017-10074HigAug 8, 2017
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2017-10061HigAug 8, 2017
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-10013HigAug 8, 2017
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-3629HigJun 22, 2017
    Oracle Corporation
    Solaris
    risk 0.54cvss 7.8epss 0.06

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…

  • CVE-2017-3622HigApr 24, 2017
    Oracle Corporation
    Solaris
    risk 0.54cvss 7.8epss 0.06

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2017-3580HigApr 24, 2017
    Oracle Corporation
    Sun Zfs Storage Appliance Kit
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2017-3575HigApr 24, 2017
    Oracle Corporation
    VM Virtualbox
    risk 0.54cvss 7.9epss 0.02

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure…

  • CVE-2017-3514HigApr 24, 2017
    Oracle Corporation
    Java Se
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…

  • CVE-2017-3512HigApr 24, 2017
    Oracle Corporation
    Java Se
    risk 0.54cvss 8.3epss 0.03

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2017-3306HigApr 24, 2017
    Oracle Corporation
    Mysql Enterprise Monitor
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged…

  • CVE-2017-3260HigJan 27, 2017
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.02

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2016-5573HigOct 25, 2016
    Oracle Corporation
    Java SE Embedded
    risk 0.54cvss 8.3epss 0.04

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.

  • CVE-2016-3473HigOct 25, 2016
    Oracle Corporation
    Fusion Middleware
    risk 0.54cvss 7.7epss 0.12

    Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2016-5445HigJul 21, 2016
    Oracle Corporation
    Sun Systems Products Suite
    risk 0.54cvss 8.3epss 0.03

    Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2016-3535HigJul 21, 2016
    Oracle Corporation
    CRM Technical Foundation
    risk 0.54cvss 8.2epss 0.03

    Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Remote Launch. NOTE: the previous information is from the July 2016 CPU. Oracle has…

  • CVE-2016-3532HigJul 21, 2016
    Oracle Corporation
    Advanced Inbound Telephony
    risk 0.54cvss 8.2epss 0.03

    Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is…

  • CVE-2016-3522HigJul 21, 2016
    Oracle Corporation
    Web Applications Desktop Integrator
    risk 0.54cvss 8.2epss 0.03

    Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Application Service.

  • CVE-2016-3512HigJul 21, 2016
    Oracle Corporation
    Customer Interaction History
    risk 0.54cvss 8.2epss 0.03

    Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.

  • CVE-2016-3491HigJul 21, 2016
    Oracle Corporation
    CRM Technical Foundation
    risk 0.54cvss 8.2epss 0.03

    Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Wireless Framework. NOTE: the previous information is from the July 2016 CPU.…

  • CVE-2016-3446HigJul 21, 2016
    Oracle Corporation
    Business Intelligence
    risk 0.54cvss 8.3epss 0.03

    Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.

  • CVE-2016-4997HigJul 3, 2016
    Linux
    Kernel
    risk 0.54cvss 7.8epss 0.06

    The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a…

  • CVE-2016-3449HigApr 21, 2016
    Oracle Corporation
    Java Se
    risk 0.54cvss 8.3epss 0.05

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

  • CVE-2016-0778HigJan 14, 2016
    OpenSSH
    OpenSSH
    risk 0.54cvss 8.1epss 0.22

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a…

  • CVE-2003-0411HigJun 30, 2003
    Sun Corporation
    Java System Application Server
    risk 0.54cvss 7.5epss 0.25

    Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

  • CVE-2026-83408HigSep 15, 2026
    Oracle Corporation
    Graalvm For Jdk
    risk 0.53cvss 8.1epss 0.00

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit…

  • CVE-2026-83357HigSep 15, 2026
    Oracle Corporation
    Graalvm For Jdk
    risk 0.53cvss 8.1epss 0.00

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit…

  • CVE-2026-87288HigSep 15, 2026
    Oracle Corporation
    Graalvm For Jdk
    risk 0.53cvss 8.1epss 0.00

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-87287HigSep 15, 2026
    Oracle Corporation
    Graalvm For Jdk
    risk 0.53cvss 8.1epss 0.00

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-87286HigSep 15, 2026
    Oracle Corporation
    Graalvm For Jdk
    risk 0.53cvss 8.1epss 0.00

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-87266HigSep 15, 2026
    Oracle Corporation
    Agile Plm
    risk 0.53cvss 8.2epss 0.00

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. …

Page 32 of 270