Oracle

CVE-2008-3431 is a local privilege escalation vulnerability in Sun xVM VirtualBox versions prior to 1.6.4, caused by improper validation of buffer data in the V…

CVE-2010-0840 is a critical remote code execution vulnerability in Oracle Java SE and Java for Business versions 6 Update 18, 5.0 Update 23, and 1.4.2_25. The f…

CVE-2011-3544 is a critical vulnerability in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier, allowing remote untrusted Java Web Start applications and…

CVE-2012-0507 is a critical vulnerability in Oracle Java SE versions 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier, affecting t…

CVE-2012-0518 is a medium severity vulnerability (CVSS 4.7) in Oracle Fusion Middleware 10.1.4.3.0 affecting the Application Server Single Sign-On component. It…

CVE-2012-1710 is a critical vulnerability in Oracle Fusion Middleware 10.1.3.5 affecting the WebCenter Forms Recognition Designer component, allowing remote att…

CVE-2012-1723 is a critical vulnerability in Oracle Java SE affecting versions 7u4 and earlier, 6u32 and earlier, 5u35 and earlier, and 1.4.2_37 and earlier. Th…

CVE-2012-3152 is a critical vulnerability in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 affecting the Oracle Reports Developer component. It allo…

CVE-2012-4681 is a critical remote code execution vulnerability in Oracle Java SE 7 Update 6 and earlier, affecting the Java Runtime Environment. It allows atta…

CVE-2012-5076 is a critical vulnerability in Oracle Java SE 7 Update 7 and earlier, specifically affecting the JAX-WS component of the Java Runtime Environment.…

CVE-2013-0422 is a critical remote code execution vulnerability in Oracle Java 7 prior to Update 11, involving flaws in the JMX MBean server and the Reflection …

CVE-2013-0431 is a medium severity vulnerability (CVSS 5.3) in Oracle Java SE 7 through Update 11 and OpenJDK 7 that allows user-assisted remote attackers to by…

CVE-2013-2423 is a vulnerability in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, affecting the Java Runtime Environment (JRE) HotSpot component. It al…

CVE-2013-2465 is a critical vulnerability in Oracle Java SE affecting versions 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, …

CVE-2015-2590 is a critical vulnerability in Oracle Java SE versions 6u95, 7u80, and 8u45, as well as Java SE Embedded 7u75 and 8u33, allowing remote attackers …

CVE-2015-4852 is a critical remote code execution vulnerability in Oracle WebLogic Server versions 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0, caused by insecur…

CVE-2015-4902 is a medium severity vulnerability in Oracle Java SE versions 6u101, 7u85, and 8u60 affecting integrity via unknown vectors related to Deployment.…

CVE-2016-3427 is a critical vulnerability in Oracle Java SE 6u113, 7u99, 8u77, Java SE Embedded 8u77, and JRockit R28.3.9 affecting confidentiality, integrity, …

CVE-2017-10271 is a high-severity vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, and 12.2.1.2.0. It allows unaut…

CVE-2017-3506 is a command injection vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1, and 12.2.1.2. It allows …

CVE-2018-2628 is a critical vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0, 12.1.3.0, 12.2.1.2, and 12.2.1.3. It allows unauthenticated att…

CVE-2019-2616 is a HIGH severity vulnerability in Oracle Fusion Middleware BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0, allowing unauthenticate…

CVE-2019-2725 is a critical vulnerability in Oracle WebLogic Server that has been actively exploited in the wild, as indicated by its inclusion in CISA's Known …

CVE-2019-3010 is a high-severity vulnerability in Oracle Solaris 11 affecting the XScreenSaver component, allowing low-privileged attackers with local logon acc…

CVE-2020-14644 is a critical vulnerability in Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0, allowing unauthenticated attackers to comp…

CVE-2020-14750 is a critical vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It allow…

CVE-2020-14864 is an actively exploited vulnerability in Oracle Intelligence Enterprise Edition, listed on CISA's Known Exploited Vulnerabilities catalog with a…

CVE-2020-14871 is a critical vulnerability in Oracle Solaris versions 10 and 11 affecting the Pluggable authentication module, classified as a memory corruption…

CVE-2020-14882 is a critical vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It allow…

CVE-2020-14883 is a high-severity vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It …

CVE-2020-2551 is a critical vulnerability in Oracle WebLogic Server (versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0) affecting the WLS Core Compone…

CVE-2020-2555 is a critical vulnerability in Oracle Coherence affecting versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, classified under CWE-502 (Dese…

CVE-2020-2883 is a critical vulnerability in Oracle WebLogic Server affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, allowing unauthentica…

CVE-2021-35587 is a critical vulnerability in Oracle Access Manager (versions 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0) affecting the OpenSSO Agent component. It …

CVE-2022-21445 is a critical vulnerability in Oracle Application Development Framework (ADF) Faces, affecting versions 12.2.1.3.0 and 12.2.1.4.0, classified und…

CVE-2022-21587 is a critical vulnerability in Oracle E-Business Suite Web Applications Desktop Integrator (versions 12.2.3-12.2.11) allowing unauthenticated att…

CVE-2023-21839 is a high-severity vulnerability (CVSS 7.5) affecting Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It allows unauthent…

CVE-2024-20953 is a high-severity vulnerability (CVSS 8.8) in Oracle Agile PLM version 9.3.6 affecting the Export component. It allows a low-privileged attacker…

CVE-2024-21182 is a high-severity vulnerability in Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, allowing unauthenticated attackers to compromise t…

CVE-2024-21287 is a high-severity vulnerability (CVSS 7.5) in Oracle Agile PLM Framework version 9.3.6, affecting the Software Development Kit Process Extension…

CVE-2025-61757 is a critical vulnerability in Oracle Fusion Middleware Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) affecting the REST WebServices comp…

CVE-2025-61882 is a critical vulnerability in Oracle E-Business Suite's Concurrent Processing product, specifically affecting BI Publisher Integration in versio…

CVE-2025-61884 is a high-severity vulnerability in Oracle E-Business Suite Configurator Runtime UI versions 12.2.3 through 12.2.14, allowing unauthenticated att…

CVE-2026-21932 is a high-severity vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting components AWT and Ja…

Oracle Database Server versions 23.4.0 through 23.26.1 contain a vulnerability in the XML Database component classified as CWE-200. This medium severity issue (…

CVE-2026-22001 is a low-severity information disclosure vulnerability in Oracle MySQL Server versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. It allows high…

CVE-2026-22019 is a medium severity vulnerability (CVSS 5.4) in Oracle PeopleSoft Enterprise HCM Shared Components version 9.2, specifically affecting the Perso…

CVE-2026-34266 is a medium severity vulnerability (CVSS 6.5) in Oracle PeopleSoft Enterprise HCM Absence Management version 9.2, classified under CWE-306 (Failu…

CVE-2026-34267 is a medium severity vulnerability (CVSS 4.9) in Oracle MySQL Server versions 8.0.0 through 8.0.45, specifically within the Server Optimizer comp…

CVE-2026-34269 is a medium severity vulnerability (CVSS 6.1) in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.62, specifically within the Por…

Oracle MySQL Server versions 8.0.0 through 8.0.45 contain a vulnerability in the Server Optimizer component classified under CWE-400. This issue allows a high-p…

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 are affected by a critical vulnerability (CVE-2026-34279) classified as CWE-306, an authenticatio…

CVE-2026-34303 is a medium severity vulnerability (CVSS 3.1 score 6.5) in Oracle MySQL Server versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. It is classif…

Oracle MySQL Server versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0 contain a denial-of-service vulnerability in the Server JSON component. This issue, clas…

Oracle MySQL Server versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0 are affected by a vulnerability in the InnoDB component. This issue allows a high-privil…