Vendor CVEs

Oracle Corporation

All CVEs

10,082 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2013-0431	Openjdk OpenJDK	Med	0.63	5.3	0.90	KEV	Jan 31, 2013	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different…
CVE-2016-4553	Squid Cache Squid	Hig	0.62	8.6	0.80		May 10, 2016	client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
CVE-2014-3153	Linux Kernel	Hig	0.62	7.8	0.37	KEV	Jun 7, 2014	The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
CVE-2018-2739	Oracle Corporation Access Manager	Cri	0.61	9.3	0.02		Apr 19, 2018	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-2623	Oracle Corporation Sun Zfs Storage Appliance Kit	Cri	0.61	9.3	0.02		Jan 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-2584	Ciser System Sl Csip Firmware	Cri	0.60	—	0.00		Mar 2, 2026	A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity…
CVE-2018-2879	Oracle Corporation Access Manager	Cri	0.60	9.0	0.22		Apr 19, 2018	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2698	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Jan 18, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10204	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10129	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Aug 8, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-1000028	Oracle Corporation Glassfish Server	Hig	0.60	7.5	0.99		Jul 17, 2017	Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.
CVE-2017-3576	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Apr 24, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2017-3563	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.01		Apr 24, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2017-3561	Oracle Corporation VM Virtualbox	Hig	0.60	8.8	0.02		Apr 24, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-46833	Oracle Corporation Database Server	Cri	0.59	9.0	0.00		May 28, 2026	Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. While the vulnerability is…
CVE-2026-46819	Oracle Corporation Oracle Internet Procurement Connector	Cri	0.59	9.1	0.00		May 28, 2026	Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-34287	Oracle Corporation Identity Manager Connector	Cri	0.59	9.1	0.00		Apr 21, 2026	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34286	Oracle Corporation Identity Manager Connector	Cri	0.59	9.1	0.00		Apr 21, 2026	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34285	Oracle Corporation Identity Manager Connector	Cri	0.59	9.1	0.00		Apr 21, 2026	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34279	Oracle Corporation Enterprise Manager Base Platform	Cri	0.59	9.1	0.00		Apr 21, 2026	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2018-3100	Oracle Corporation Fusion Middleware	Cri	0.59	9.1	0.03		Jul 18, 2018	Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & Discovery). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable…
CVE-2018-2938	Oracle Corporation Java SE	Cri	0.59	9.0	0.02		Jul 18, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2018-2871	Oracle Corporation Human Resources	Cri	0.59	9.1	0.03		Apr 19, 2018	Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2870	Oracle Corporation Human Resources	Cri	0.59	9.1	0.03		Apr 19, 2018	Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2791	Oracle Corporation Webcenter Sites	Hig	0.59	8.2	0.39		Apr 19, 2018	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2697	Oracle Corporation Hospitality Cruise Fleet Management	Cri	0.59	9.1	0.02		Jan 18, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2664	Oracle Corporation Sun Zfs Storage Appliance Kit	Cri	0.59	9.0	0.02		Jan 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-2656	Oracle Corporation General Ledger	Cri	0.59	9.1	0.02		Jan 18, 2018	Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-2655	Oracle Corporation Work in Process	Cri	0.59	9.1	0.02		Jan 18, 2018	Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite (subcomponent: Assemble/Configure to Order). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-2616	Oracle Corporation Oss Support Tools	Hig	0.59	8.8	0.27		Jan 18, 2018	Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10282	Oracle Corporation Database Server	Cri	0.59	9.1	0.02		Jan 18, 2018	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via…
CVE-2017-10330	Oracle Corporation Common Applications	Cri	0.59	9.1	0.03		Oct 19, 2017	Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10329	Oracle Corporation Global Order Promising	Cri	0.59	9.1	0.03		Oct 19, 2017	Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales Orders). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10102	NetApp Steelstore Cloud Integrated Storage	Cri	0.59	9.0	0.03		Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-3599	Oracle Corporation MySQL	Hig	0.59	7.5	0.90		Apr 24, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3508	Oracle Corporation Primavera Gateway	Cri	0.59	9.1	0.02		Apr 24, 2017	Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged…
CVE-2017-3310	Oracle Corporation Database 9i	Cri	0.59	9.0	0.02		Jan 27, 2017	Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple…
CVE-2016-8325	Oracle Corporation One To One Fulfillment	Cri	0.59	9.1	0.02		Jan 27, 2017	Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2016-5528	Oracle Corporation Glassfish Server	Cri	0.59	9.0	0.02		Jan 27, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2016-5605	Oracle Corporation VM Virtualbox	Cri	0.59	9.1	0.02		Oct 25, 2016	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.
CVE-2016-5599	Oracle Corporation Advanced Supply Chain Planning	Cri	0.59	9.1	0.02		Oct 25, 2016	Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.
CVE-2016-5555	Oracle Corporation Database Server	Cri	0.59	9.1	0.02		Oct 25, 2016	Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-2776	Isc Bind	Hig	0.59	7.5	0.89		Sep 28, 2016	buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVE-2016-3609	Oracle Corporation Database Server	Cri	0.59	9.0	0.03		Jul 21, 2016	Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3546	Oracle Corporation Advanced Collections	Cri	0.59	9.1	0.04		Jul 21, 2016	Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Report JSPs.
CVE-2016-3543	Oracle Corporation Common Applications Calendar	Cri	0.59	9.1	0.04		Jul 21, 2016	Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
CVE-2016-3541	Oracle Corporation Common Applications Calendar	Cri	0.59	9.1	0.04		Jul 21, 2016	Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Notes.
CVE-2016-3527	Oracle Corporation Demand Planning	Cri	0.59	9.1	0.04		Jul 21, 2016	Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet.
CVE-2016-4554	Squid Cache Squid	Hig	0.59	8.6	0.39		May 10, 2016	mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
CVE-2016-4054	Squid Cache Squid	Hig	0.59	8.1	0.78		Apr 25, 2016	Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

CVE-2013-0431MedKEVJan 31, 2013
Openjdk
OpenJDK
risk 0.63cvss 5.3epss 0.90
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different…
CVE-2016-4553HigMay 10, 2016
Squid Cache
Squid
risk 0.62cvss 8.6epss 0.80
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
CVE-2014-3153HigKEVJun 7, 2014
Linux
Kernel
risk 0.62cvss 7.8epss 0.37
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
CVE-2018-2739CriApr 19, 2018
Oracle Corporation
Access Manager
risk 0.61cvss 9.3epss 0.02
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2018-2623CriJan 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.61cvss 9.3epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2026-2584CriMar 2, 2026
Ciser System Sl
Csip Firmware
risk 0.60cvss —epss 0.00
A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity…
CVE-2018-2879CriApr 19, 2018
Oracle Corporation
Access Manager
risk 0.60cvss 9.0epss 0.22
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2698HigJan 18, 2018
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10204HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10129HigAug 8, 2017
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-1000028HigJul 17, 2017
Oracle Corporation
Glassfish Server
risk 0.60cvss 7.5epss 0.99
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability, that can be exploited by issuing a specially crafted HTTP GET request.
CVE-2017-3576HigApr 24, 2017
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2017-3563HigApr 24, 2017
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2017-3561HigApr 24, 2017
Oracle Corporation
VM Virtualbox
risk 0.60cvss 8.8epss 0.02
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2026-46833CriMay 28, 2026
Oracle Corporation
Database Server
risk 0.59cvss 9.0epss 0.00
Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. While the vulnerability is…
CVE-2026-46819CriMay 28, 2026
Oracle Corporation
Oracle Internet Procurement Connector
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-34287CriApr 21, 2026
Oracle Corporation
Identity Manager Connector
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34286CriApr 21, 2026
Oracle Corporation
Identity Manager Connector
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34285CriApr 21, 2026
Oracle Corporation
Identity Manager Connector
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…
CVE-2026-34279CriApr 21, 2026
Oracle Corporation
Enterprise Manager Base Platform
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via…
CVE-2018-3100CriJul 18, 2018
Oracle Corporation
Fusion Middleware
risk 0.59cvss 9.1epss 0.03
Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & Discovery). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable…
CVE-2018-2938CriJul 18, 2018
Oracle Corporation
Java SE
risk 0.59cvss 9.0epss 0.02
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise…
CVE-2018-2871CriApr 19, 2018
Oracle Corporation
Human Resources
risk 0.59cvss 9.1epss 0.03
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2870CriApr 19, 2018
Oracle Corporation
Human Resources
risk 0.59cvss 9.1epss 0.03
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2791HigApr 19, 2018
Oracle Corporation
Webcenter Sites
risk 0.59cvss 8.2epss 0.39
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2697CriJan 18, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2664CriJan 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.59cvss 9.0epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.13. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-2656CriJan 18, 2018
Oracle Corporation
General Ledger
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-2655CriJan 18, 2018
Oracle Corporation
Work in Process
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite (subcomponent: Assemble/Configure to Order). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-2616HigJan 18, 2018
Oracle Corporation
Oss Support Tools
risk 0.59cvss 8.8epss 0.27
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2017-10282CriJan 18, 2018
Oracle Corporation
Database Server
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via…
CVE-2017-10330CriOct 19, 2017
Oracle Corporation
Common Applications
risk 0.59cvss 9.1epss 0.03
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10329CriOct 19, 2017
Oracle Corporation
Global Order Promising
risk 0.59cvss 9.1epss 0.03
Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales Orders). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10102CriAug 8, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.59cvss 9.0epss 0.03
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2017-3599HigApr 24, 2017
Oracle Corporation
MySQL
risk 0.59cvss 7.5epss 0.90
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via…
CVE-2017-3508CriApr 24, 2017
Oracle Corporation
Primavera Gateway
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged…
CVE-2017-3310CriJan 27, 2017
Oracle Corporation
Database 9i
risk 0.59cvss 9.0epss 0.02
Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple…
CVE-2016-8325CriJan 27, 2017
Oracle Corporation
One To One Fulfillment
risk 0.59cvss 9.1epss 0.02
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Internal Operations). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2016-5528CriJan 27, 2017
Oracle Corporation
Glassfish Server
risk 0.59cvss 9.0epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2016-5605CriOct 25, 2016
Oracle Corporation
VM Virtualbox
risk 0.59cvss 9.1epss 0.02
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.
CVE-2016-5599CriOct 25, 2016
Oracle Corporation
Advanced Supply Chain Planning
risk 0.59cvss 9.1epss 0.02
Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.
CVE-2016-5555CriOct 25, 2016
Oracle Corporation
Database Server
risk 0.59cvss 9.1epss 0.02
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-2776HigSep 28, 2016
Isc
Bind
risk 0.59cvss 7.5epss 0.89
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVE-2016-3609CriJul 21, 2016
Oracle Corporation
Database Server
risk 0.59cvss 9.0epss 0.03
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2016-3546CriJul 21, 2016
Oracle Corporation
Advanced Collections
risk 0.59cvss 9.1epss 0.04
Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Report JSPs.
CVE-2016-3543CriJul 21, 2016
Oracle Corporation
Common Applications Calendar
risk 0.59cvss 9.1epss 0.04
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks.
CVE-2016-3541CriJul 21, 2016
Oracle Corporation
Common Applications Calendar
risk 0.59cvss 9.1epss 0.04
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Notes.
CVE-2016-3527CriJul 21, 2016
Oracle Corporation
Demand Planning
risk 0.59cvss 9.1epss 0.04
Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet.
CVE-2016-4554HigMay 10, 2016
Squid Cache
Squid
risk 0.59cvss 8.6epss 0.39
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
CVE-2016-4054HigApr 25, 2016
Squid Cache
Squid
risk 0.59cvss 8.1epss 0.78
Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.

Page 4 of 202