VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2026-62492HigAug 18, 2026
    Oracle Corporation
    Hyperion
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to…

  • CVE-2026-60933HigAug 18, 2026
    Oracle Corporation
    Webcenter Content
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-60915HigAug 18, 2026
    Oracle Corporation
    Helidon
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-60856HigAug 18, 2026
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-60820HigAug 18, 2026
    Oracle Corporation
    Siebel CRM Integration
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. …

  • CVE-2026-60803HigAug 18, 2026
    Oracle Corporation
    Siebel Apps Marketing
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps -…

  • CVE-2026-60797HigAug 18, 2026
    Oracle Corporation
    Siebel CRM Integration
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Integration.…

  • CVE-2026-60792HigAug 18, 2026
    Oracle Corporation
    Siebel CRM
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel…

  • CVE-2026-60766HigAug 18, 2026
    Oracle Corporation
    Siebel CRM Integration
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM Integration.…

  • CVE-2026-60759HigAug 18, 2026
    Oracle Corporation
    Oracle Internet Procurement Connector
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…

  • CVE-2026-61210HigJul 21, 2026
    Oracle Corporation
    Peoplesoft Enterprise Scm Manufacturing
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…

  • CVE-2026-61185HigJul 21, 2026
    Oracle Corporation
    Agile Product Lifecycle Management For Process
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical…

  • CVE-2026-61173HigJul 21, 2026
    Oracle Corporation
    Agile Plm
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. …

  • CVE-2026-60317HigJul 21, 2026
    Oracle Corporation
    Mysql Connectors
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2026-60179HigJul 21, 2026
    Oracle Corporation
    Mysql Connectors
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2026-47058HigJul 21, 2026
    Oracle Corporation
    Java Se
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle…

  • CVE-2026-47050HigJul 21, 2026
    Oracle Corporation
    VM Virtualbox
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes…

  • CVE-2026-46943HigJul 21, 2026
    Oracle Corporation
    Retail Eftlink
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). Supported versions that are affected are 21.0.0-25.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise…

  • CVE-2026-46818HigMay 28, 2026
    Oracle Corporation
    Payments
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle…

  • CVE-2026-21932HigJan 20, 2026
    Graalvm
    Graalvm Ce Builds
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle…

  • CVE-2025-30736HigApr 15, 2025
    Oracle Corporation
    Database Server
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM.…

  • CVE-2025-21587HigApr 15, 2025
    Oracle Corporation
    Jdk
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14,…

  • CVE-2024-21147HigJul 16, 2024
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-20952HigJan 16, 2024
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

  • CVE-2024-20918HigJan 16, 2024
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

  • CVE-2023-21901HigJan 16, 2024
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.48cvss 7.4epss 0.00

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable…

  • CVE-2023-21930HigApr 18, 2023
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1.…

  • CVE-2022-21615HigOct 18, 2022
    Oracle Corporation
    Enterprise Data Quality
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21542HigJul 19, 2022
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD…

  • CVE-2021-35590MedOct 20, 2021
    NetApp
    Snapcenter
    risk 0.48cvss 6.3epss 0.89

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with…

  • CVE-2021-32804HigAug 3, 2021
    Tar Project
    Tar
    risk 0.48cvss 8.2epss 0.15

    The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into…

  • CVE-2021-32066HigAug 1, 2021
    Ruby Lang
    Ruby
    risk 0.48cvss 7.4epss 0.03

    An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network…

  • CVE-2021-29505HigMay 28, 2021
    Xstream
    Xstream
    risk 0.48cvss 7.5epss 0.77

    XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the…

  • CVE-2021-2240HigApr 22, 2021
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-2219HigApr 22, 2021
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2008HigApr 22, 2021
    Oracle Corporation
    Enterprise Manager
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2020-28895HigFeb 3, 2021
    Windriver
    Vxworks
    risk 0.48cvss 7.3epss 0.02

    In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

  • CVE-2020-14593HigJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.48cvss 7.4epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14536HigJul 15, 2020
    Oracle Corporation
    Commerce Guided Search
    risk 0.48cvss 7.4epss 0.02

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated…

  • CVE-2020-14535HigJul 15, 2020
    Oracle Corporation
    Commerce Service Center
    risk 0.48cvss 7.4epss 0.02

    Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-9410HigMay 20, 2020
    TIBCO Software
    Jasperreports Server
    risk 0.48cvss 7.3epss 0.05

    The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a…

  • CVE-2020-2787HigApr 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2020-2786HigApr 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2020-2785HigApr 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2020-2784HigApr 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2020-2739HigApr 15, 2020
    Oracle Corporation
    Webcenter Sites
    risk 0.48cvss 7.4epss 0.02

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2020-2543HigJan 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2019-2972HigOct 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2019-2971HigOct 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2019-2970HigOct 16, 2019
    Oracle Corporation
    Outside In Technology
    risk 0.48cvss 7.3epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

Page 74 of 270