Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-2921	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.38	5.8	0.02	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2915	Oracle Corporation Hyperion Data Relationship Management	Med	0.38	5.8	0.02	Jul 18, 2018	Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-2673	Oracle Corporation Hospitality Simphony	Med	0.38	5.9	0.01	Jan 18, 2018	Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10262	Oracle Corporation Fusion Middleware	Med	0.38	5.9	0.02	Jan 18, 2018	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2017-10422	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.38	5.9	0.02	Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10339	Oracle Corporation Hospitality Suite8	Med	0.38	5.9	0.01	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10173	Oracle Corporation Retail Open Commerce Platform Cloud Service	Med	0.38	5.8	0.02	Aug 8, 2017	Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Website). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10148	Oracle Corporation Weblogic Server	Med	0.38	5.8	0.03	Aug 8, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10046	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.38	5.4	0.04	Aug 8, 2017	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged…
CVE-2017-3631	Oracle Corporation Solaris	Med	0.38	5.3	0.06	Jun 22, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise…
CVE-2017-3630	Oracle Corporation Solaris	Med	0.38	5.3	0.05	Jun 22, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3594	Oracle Corporation Webcenter Sites	Med	0.38	5.9	0.01	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2017-3255	Oracle Corporation Jdeveloper	Med	0.38	5.8	0.02	Jan 27, 2017	Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows…
CVE-2017-3252	Sun Corporation Java SE	Med	0.38	5.8	0.02	Jan 27, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low…
CVE-2017-3242	Oracle Corporation VM Server	Med	0.38	5.9	0.00	Jan 27, 2017	Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: LDOM Manager). Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2016-5527	Oracle Corporation Supply Chain Products Suite	Med	0.38	5.9	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.
CVE-2016-5477	Oracle Corporation Glassfish Server	Med	0.38	5.8	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVE-2016-3608	Oracle Corporation Glassfish Server	Med	0.38	5.8	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVE-2016-3529	Oracle Corporation Agile Plm	Med	0.38	5.8	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3560.
CVE-2016-3467	Oracle Corporation Application Express	Med	0.38	5.8	0.03	Jul 21, 2016	Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.
CVE-2016-0677	Oracle Corporation Database Server	Med	0.38	5.9	0.02	Apr 21, 2016	Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.
CVE-2015-3195	OpenSSL Project OpenSSL	Med	0.38	5.3	0.39	Dec 6, 2015	The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information…
CVE-2026-35241	Oracle Corporation Peoplesoft Enterprise Cs Student Records	Med	0.37	5.7	0.00	Apr 21, 2026	Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2025-30737	Oracle Corporation Smart View for Office	Med	0.37	5.7	0.00	Apr 15, 2025	Vulnerability in the Oracle Smart View for Office product of Oracle Hyperion (component: Core Smart View). The supported version that is affected is 24.200. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2023-21986	Oracle Corporation GraalVM Enterprise Edition	Med	0.37	5.7	0.00	Apr 18, 2023	Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2023-21970	Oracle Corporation Bi Publisher	Med	0.37	5.7	0.01	Apr 18, 2023	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. …
CVE-2023-21965	Oracle Corporation Oracle Business Intelligence Enterprise Edition	Med	0.37	5.7	0.01	Apr 18, 2023	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2023-21952	Oracle Corporation Oracle Business Intelligence Enterprise Edition	Med	0.37	5.7	0.01	Apr 18, 2023	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2022-21609	Oracle Corporation Oracle Business Intelligence Enterprise Edition	Med	0.37	5.7	0.01	Oct 18, 2022	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2022-21557	Oracle Corporation Weblogic Server	Med	0.37	5.7	0.00	Jul 19, 2022	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2021-35616	Oracle Corporation Transportation Management	Med	0.37	5.4	0.28	Oct 20, 2021	Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-35606	Oracle Corporation Peoplesoft Enterprise Cs Campus Community	Med	0.37	5.7	0.01	Oct 20, 2021	Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Notification Framework). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2021-35601	Oracle Corporation PeopleSoft Enterprise CS SA Integration Pack	Med	0.37	5.7	0.00	Oct 20, 2021	Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2021-2445	Oracle Corporation Hyperion Infrastructure Technology	Med	0.37	5.7	0.01	Jul 21, 2021	Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2020-14617	Oracle Corporation Primavera Unifier	Med	0.37	5.7	0.01	Jul 15, 2020	Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low…
CVE-2020-2677	Oracle Corporation Oracle Hospitality OPERA 5	Med	0.37	5.7	0.01	Jan 15, 2020	Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2019-2979	Oracle Corporation Flexcube Direct Banking	Med	0.37	5.7	0.01	Oct 16, 2019	Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2956	Oracle Corporation Core RDBMS (jackson-databind)	Med	0.37	5.7	0.01	Oct 16, 2019	Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access…
CVE-2019-2847	Oracle Corporation Flexcube Investor Servicing	Med	0.37	5.7	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2840	Oracle Corporation Flexcube Universal Banking	Med	0.37	5.7	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2018-3274	Oracle Corporation Solaris	Med	0.37	5.7	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3263	Oracle Corporation Solaris	Med	0.37	5.6	0.02	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-3180	Oracle Corporation Jrockit	Med	0.37	5.6	0.03	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-2924	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.37	5.7	0.00	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-10389	Oracle Corporation Hospitality Suite8	Med	0.37	5.7	0.00	Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10051	Oracle Corporation Fusion Middleware	Med	0.37	5.7	0.01	Oct 19, 2017	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2017-3597	Oracle Corporation Webcenter Sites	Med	0.37	5.7	0.02	Apr 24, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3292	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.37	5.7	0.02	Jan 27, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-3276	Oracle Corporation Solaris	Med	0.37	5.7	0.00	Jan 27, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2017-3265	MariaDB MariaDB	Med	0.37	5.6	0.01	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to…

CVE-2018-2921MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2915MedJul 18, 2018
Oracle Corporation
Hyperion Data Relationship Management
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-2673MedJan 18, 2018
Oracle Corporation
Hospitality Simphony
risk 0.38cvss 5.9epss 0.01
Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: POS). Supported versions that are affected are 2.7, 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10262MedJan 18, 2018
Oracle Corporation
Fusion Middleware
risk 0.38cvss 5.9epss 0.02
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2017-10422MedOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.38cvss 5.9epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). The supported version that is affected is 8.54. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10339MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.38cvss 5.9epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10173MedAug 8, 2017
Oracle Corporation
Retail Open Commerce Platform Cloud Service
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Website). Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10148MedAug 8, 2017
Oracle Corporation
Weblogic Server
risk 0.38cvss 5.8epss 0.03
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10046MedAug 8, 2017
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.38cvss 5.4epss 0.04
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged…
CVE-2017-3631MedJun 22, 2017
Oracle Corporation
Solaris
risk 0.38cvss 5.3epss 0.06
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise…
CVE-2017-3630MedJun 22, 2017
Oracle Corporation
Solaris
risk 0.38cvss 5.3epss 0.05
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2017-3594MedApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.38cvss 5.9epss 0.01
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2017-3255MedJan 27, 2017
Oracle Corporation
Jdeveloper
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows…
CVE-2017-3252MedJan 27, 2017
Sun Corporation
Java SE
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low…
CVE-2017-3242MedJan 27, 2017
Oracle Corporation
VM Server
risk 0.38cvss 5.9epss 0.00
Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: LDOM Manager). Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure…
CVE-2016-5527MedOct 25, 2016
Oracle Corporation
Supply Chain Products Suite
risk 0.38cvss 5.9epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5524.
CVE-2016-5477MedJul 21, 2016
Oracle Corporation
Glassfish Server
risk 0.38cvss 5.8epss 0.02
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVE-2016-3608MedJul 21, 2016
Oracle Corporation
Glassfish Server
risk 0.38cvss 5.8epss 0.02
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
CVE-2016-3529MedJul 21, 2016
Oracle Corporation
Agile Plm
risk 0.38cvss 5.8epss 0.02
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a different vulnerability than CVE-2016-3526 and CVE-2016-3560.
CVE-2016-3467MedJul 21, 2016
Oracle Corporation
Application Express
risk 0.38cvss 5.8epss 0.03
Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.
CVE-2016-0677MedApr 21, 2016
Oracle Corporation
Database Server
risk 0.38cvss 5.9epss 0.02
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors.
CVE-2015-3195MedDec 6, 2015
OpenSSL Project
OpenSSL
risk 0.38cvss 5.3epss 0.39
The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information…
CVE-2026-35241MedApr 21, 2026
Oracle Corporation
Peoplesoft Enterprise Cs Student Records
risk 0.37cvss 5.7epss 0.00
Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2025-30737MedApr 15, 2025
Oracle Corporation
Smart View for Office
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Oracle Smart View for Office product of Oracle Hyperion (component: Core Smart View). The supported version that is affected is 24.200. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle…
CVE-2023-21986MedApr 18, 2023
Oracle Corporation
GraalVM Enterprise Edition
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2023-21970MedApr 18, 2023
Oracle Corporation
Bi Publisher
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. …
CVE-2023-21965MedApr 18, 2023
Oracle Corporation
Oracle Business Intelligence Enterprise Edition
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2023-21952MedApr 18, 2023
Oracle Corporation
Oracle Business Intelligence Enterprise Edition
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2022-21609MedOct 18, 2022
Oracle Corporation
Oracle Business Intelligence Enterprise Edition
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server). The supported version that is affected is 5.9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2022-21557MedJul 19, 2022
Oracle Corporation
Weblogic Server
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the…
CVE-2021-35616MedOct 20, 2021
Oracle Corporation
Transportation Management
risk 0.37cvss 5.4epss 0.28
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-35606MedOct 20, 2021
Oracle Corporation
Peoplesoft Enterprise Cs Campus Community
risk 0.37cvss 5.7epss 0.01
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Notification Framework). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2021-35601MedOct 20, 2021
Oracle Corporation
PeopleSoft Enterprise CS SA Integration Pack
risk 0.37cvss 5.7epss 0.00
Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Students Administration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2021-2445MedJul 21, 2021
Oracle Corporation
Hyperion Infrastructure Technology
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2020-14617MedJul 15, 2020
Oracle Corporation
Primavera Unifier
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low…
CVE-2020-2677MedJan 15, 2020
Oracle Corporation
Oracle Hospitality OPERA 5
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2019-2979MedOct 16, 2019
Oracle Corporation
Flexcube Direct Banking
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2019-2956MedOct 16, 2019
Oracle Corporation
Core RDBMS (jackson-databind)
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access…
CVE-2019-2847MedJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2840MedJul 23, 2019
Oracle Corporation
Flexcube Universal Banking
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows low…
CVE-2018-3274MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.37cvss 5.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful…
CVE-2018-3263MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.37cvss 5.6epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-3180MedOct 17, 2018
Oracle Corporation
Jrockit
risk 0.37cvss 5.6epss 0.03
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-2924MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-10389MedOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2017-10051MedOct 19, 2017
Oracle Corporation
Fusion Middleware
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical…
CVE-2017-3597MedApr 24, 2017
Oracle Corporation
Webcenter Sites
risk 0.37cvss 5.7epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with…
CVE-2017-3292MedJan 27, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.37cvss 5.7epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2017-3276MedJan 27, 2017
Oracle Corporation
Solaris
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure…
CVE-2017-3265MedJan 27, 2017
MariaDB
MariaDB
risk 0.37cvss 5.6epss 0.01
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to…

Page 69 of 201