VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk
  • CVE-2026-35283CriJun 17, 2026
    Oracle Corporation
    Webcenter Enterprise Capture
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-35282CriJun 17, 2026
    Oracle Corporation
    Webcenter Enterprise Capture
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-35281CriJun 17, 2026
    Oracle Corporation
    Webcenter Enterprise Capture
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-35280CriJun 17, 2026
    Oracle Corporation
    Webcenter Enterprise Capture
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2026-35278CriJun 17, 2026
    Oracle Corporation
    Peoplesoft Enterprise Pt Peopletools
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2026-35268CriJun 17, 2026
    Oracle Corporation
    Identity Manager
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise…

  • CVE-2026-35263CriJun 17, 2026
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebLogic…

  • CVE-2026-35273CriKEVJun 11, 2026
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.64cvss 9.8epss 0.95

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2026-46839CriMay 28, 2026
    Oracle Corporation
    REST Data Services
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability…

  • CVE-2026-46824CriMay 28, 2026
    Oracle Corporation
    Universal Work Queue
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2026-46822CriMay 28, 2026
    Oracle Corporation
    iAssets
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2026-46775CriMay 28, 2026
    Oracle Corporation
    REST Data Services
    risk 0.64cvss 9.9epss 0.00

    Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While the vulnerability…

  • CVE-2026-34311CriMay 28, 2026
    Oracle Corporation
    Hospitality Opera 5 Property Services
    risk 0.64cvss 9.8epss 0.00

    Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28. Easily exploitable vulnerability allows unauthenticated…

  • CVE-2026-34275CriApr 21, 2026
    Oracle Corporation
    Advanced Inbound Telephony
    risk 0.64cvss 9.8epss 0.00

    Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2026-21992CriMar 20, 2026
    Oracle Corporation
    Identity Manager
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and …

  • CVE-2026-21994CriMar 17, 2026
    Oracle Corporation
    Edge Cloud Infrastructure Designer and Visualisation Toolkit
    risk 0.64cvss 9.8epss 0.00

    Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop). The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2026-21969CriJan 20, 2026
    Oracle Corporation
    Agile Product Lifecycle Management For Process
    risk 0.64cvss 9.8epss 0.00

    Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2025-62481CriOct 21, 2025
    Oracle Corporation
    Marketing
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2025-53072CriOct 21, 2025
    Oracle Corporation
    Marketing
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2025-53037CriOct 21, 2025
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.64cvss 9.8epss 0.00

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows…

  • CVE-2025-30727CriApr 15, 2025
    Oracle Corporation
    Scripting
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2025-21556CriJan 21, 2025
    Oracle Corporation
    Agile PLM Framework
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2025-21535CriJan 21, 2025
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2025-21524CriJan 21, 2025
    Oracle Corporation
    Jd Edwards Enterpriseone
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2024-21216CriOct 15, 2024
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2024-21181CriJul 16, 2024
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2024-21082CriApr 16, 2024
    Oracle Corporation
    Bi Publisher
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…

  • CVE-2024-21014CriApr 16, 2024
    Oracle Corporation
    Hospitality Simphony
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2024-21010CriApr 16, 2024
    Oracle Corporation
    Hospitality Simphony
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2024-20997CriApr 16, 2024
    Oracle Corporation
    Hospitality Simphony
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2023-22089CriOct 17, 2023
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2023-22072CriOct 17, 2023
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle…

  • CVE-2023-22069CriOct 17, 2023
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to…

  • CVE-2023-21890CriJan 18, 2023
    Oracle Corporation
    Communications Converged Application Server
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to…

  • CVE-2022-21543CriJul 19, 2022
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21420CriApr 19, 2022
    Oracle Corporation
    Coherence
    risk 0.64cvss 9.8epss 0.01

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise…

  • CVE-2021-35689CriFeb 24, 2022
    Oracle Corporation
    Talent Acquisition Cloud
    risk 0.64cvss 9.8epss 0.02

    A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to perform remote code execution on Taleo Enterprise Edition system. Successful attacks of this vulnerability can result in…

  • CVE-2021-3773CriFeb 16, 2022
    Netfilter
    netfilter
    risk 0.64cvss 9.8epss 0.05

    A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.

  • CVE-2022-21391CriJan 19, 2022
    Oracle Corporation
    Communications Billing And Revenue Management
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged…

  • CVE-2022-21306CriJan 19, 2022
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.04

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2022-21276CriJan 19, 2022
    Oracle Corporation
    Communications Billing And Revenue Management
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged…

  • CVE-2021-35683CriJan 19, 2022
    Oracle Corporation
    Essbase Administration Services
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2022-23219CriJan 14, 2022
    GNU
    Glibc
    risk 0.64cvss 9.8epss 0.04

    The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or…

  • CVE-2022-23218CriJan 14, 2022
    GNU
    Glibc
    risk 0.64cvss 9.8epss 0.05

    The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if…

  • CVE-2021-35617CriOct 20, 2021
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.02

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2021-42575CriOct 18, 2021
    Trustwave
    Java HTML Sanitizer
    risk 0.64cvss 9.8epss 0.03

    The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

  • CVE-2021-2447CriJul 21, 2021
    Oracle Corporation
    Secure Global Desktop
    risk 0.64cvss 9.9epss 0.01

    Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle…

  • CVE-2021-2397CriJul 21, 2021
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.02

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2021-2382CriJul 21, 2021
    Oracle Corporation
    Weblogic Server
    risk 0.64cvss 9.8epss 0.02

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2021-2463CriJul 21, 2021
    Oracle Corporation
    Commerce Platform
    risk 0.64cvss 9.8epss 0.02

    Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network…

Page 9 of 270