VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

10,010 total · sorted by risk
  • CVE-2016-3424MedJul 21, 2016
    Oracle Corporation
    MySQL
    risk 0.32cvss 4.9epss 0.02

    Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.

  • CVE-2015-3152MedMay 16, 2016
    MariaDB
    MariaDB
    risk 0.32cvss 5.9epss 0.07

    Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM"…

  • CVE-2026-35253MedMay 6, 2026
    Oracle Corporation
    Macaron
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Macaron Tool. Successful…

  • CVE-2026-34321MedApr 21, 2026
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows…

  • CVE-2026-34298MedApr 21, 2026
    Oracle Corporation
    Applications Framework
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2026-21925MedJan 20, 2026
    Sun Corporation
    Java SE
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for…

  • CVE-2025-50064MedJul 15, 2025
    Oracle Corporation
    Weblogic Server
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2025-30754MedJul 15, 2025
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:…

  • CVE-2025-4598MedMay 30, 2025
    Linux
    Kernel
    risk 0.31cvss 4.7epss 0.01

    A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content,…

  • CVE-2025-30714MedApr 15, 2025
    Oracle Corporation
    Mysql Connectors
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2025-30691MedApr 15, 2025
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2025-21502MedJan 21, 2025
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,…

  • CVE-2024-21235MedOct 15, 2024
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:…

  • CVE-2024-21155MedJul 16, 2024
    Oracle Corporation
    Zfs Storage Appliance Kit
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: User Interface). The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS…

  • CVE-2024-21148MedJul 16, 2024
    Oracle Corporation
    Applications Framework
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…

  • CVE-2024-21145MedJul 16, 2024
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21140MedJul 16, 2024
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21081MedApr 16, 2024
    Oracle Corporation
    Partner Management
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2024-20945MedFeb 17, 2024
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

  • CVE-2024-20906MedJan 16, 2024
    Oracle Corporation
    Integrated Lights Out Manager (ILOM)
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management). Supported versions that are affected are 3, 4 and 5. Easily exploitable vulnerability allows high privileged attacker with network access via ICMP to compromise…

  • CVE-2023-22091MedOct 17, 2023
    Oracle Corporation
    Graalvm For Jdk
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Difficult…

  • CVE-2022-21469MedApr 19, 2022
    Oracle Corporation
    Enterprise Manager
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2022-21402MedJan 19, 2022
    Oracle Communications
    Oracle Communications Operations Monitor
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access…

  • CVE-2022-21368MedJan 19, 2022
    Oracle Corporation
    Mysql Server
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2022-21281MedJan 19, 2022
    Oracle Corporation
    Primavera Portfolio Management
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows high…

  • CVE-2022-21263MedJan 19, 2022
    Oracle Corporation
    Solaris
    risk 0.31cvss 4.8epss 0.00

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes…

  • CVE-2021-35581MedOct 20, 2021
    Oracle Corporation
    Applications Manager
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2021-2291MedApr 22, 2021
    Oracle Corporation
    VM Virtualbox
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…

  • CVE-2021-2023MedJan 20, 2021
    Oracle Corporation
    Installed Base
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2021-2005MedJan 20, 2021
    Oracle Corporation
    Oracle Business Intelligence Enterprise Edition
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2021-1993MedJan 20, 2021
    Oracle Corporation
    Database Server
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to…

  • CVE-2020-14874MedDec 22, 2020
    Oracle Corporation
    Cloud Infrastructure Identity and Access Management
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle Cloud Services. Easily exploitable vulnerability allows high privileged attacker with network access to compromise Oracle Cloud Infrastructure Identity and Access Management.…

  • CVE-2020-14840MedOct 21, 2020
    Oracle Corporation
    Application Object Library
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2020-14822MedOct 21, 2020
    Oracle Corporation
    Installed Base
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-14746MedOct 21, 2020
    Oracle Corporation
    Applications Framework
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2020-14717MedJul 15, 2020
    Oracle Corporation
    Common Applications
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14716MedJul 15, 2020
    Oracle Corporation
    Common Applications
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-14661MedJul 15, 2020
    Oracle Corporation
    CRM Technical Foundation
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-14659MedJul 15, 2020
    Oracle Corporation
    CRM Technical Foundation
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-14574MedJul 15, 2020
    Oracle Corporation
    Communications Interactive Session Recorder
    risk 0.31cvss 4.7epss 0.00

    Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications (component: FACE). Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the…

  • CVE-2020-14556MedJul 15, 2020
    Oracle Corporation
    Java SE Embedded
    risk 0.31cvss 4.8epss 0.03

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network…

  • CVE-2020-14555MedJul 15, 2020
    Oracle Corporation
    Marketing
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…

  • CVE-2020-14554MedJul 15, 2020
    Oracle Corporation
    Application Object Library
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-14532MedJul 15, 2020
    Oracle Corporation
    Commerce
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-9314MedMay 10, 2020
    Oracle Corporation
    Iplanet Web Server
    risk 0.31cvss 4.8epss 0.01

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy…

  • CVE-2020-2899MedApr 15, 2020
    Oracle Corporation
    Peoplesoft Enterprise Scm Purchasing
    risk 0.31cvss 4.8epss 0.01

    Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…

  • CVE-2020-2886MedApr 15, 2020
    Oracle Corporation
    CRM Technical Foundation
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2020-2875MedApr 15, 2020
    Oracle Corporation
    Mysql Connectors
    risk 0.31cvss 4.7epss 0.02

    Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols…

  • CVE-2020-2862MedApr 15, 2020
    Oracle Corporation
    E Business Suite
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2020-2810MedApr 15, 2020
    Oracle Corporation
    Istore
    risk 0.31cvss 4.7epss 0.01

    Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

Page 99 of 201