Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: oracle Clear
ID Title
CVE-2015-5287 KEV The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...
CVE-2026-21962 KEV [KEV] Vulnerability in Oracle c (CVE-2026-21962)
vulnerability in Oracle c (CVE-2026-21962). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-35273 KEV [KEV] Vulnerability in Oracle c (CVE-2026-35273)
vulnerability in Oracle c (CVE-2026-35273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-21182 KEV Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...
CVE-2026-46817 KEV [KEV] Privilege Escalation in Oracle c (CVE-2026-46817)
vulnerability in Oracle c (CVE-2026-46817). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-61757 KEV [KEV] Vulnerability in Oracle fusion-middleware (CVE-2025-61757)
vulnerability in Oracle fusion-middleware (CVE-2025-61757). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-61884 KEV [KEV] Path Traversal in Oracle e-business-suite (CVE-2025-61884)
path traversal in Oracle e-business-suite (CVE-2025-61884). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2025-61882 KEV [KEV] Authentication Bypass in Oracle e-business-suite (CVE-2025-61882)
authentication bypass in Oracle e-business-suite (CVE-2025-61882). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-20953 KEV [KEV] Unsafe Deserialization in Oracle agile-product-lifecycle-management-plm (CVE-2024-20953)
vulnerability in Oracle agile-product-lifecycle-management-plm (CVE-2024-20953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-2883 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2020-2883)
vulnerability in Oracle weblogic-server (CVE-2020-2883). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-21287 KEV [KEV] Authorization Flaw in Oracle agile-product-lifecycle-management-plm (CVE-2024-21287)
vulnerability in Oracle agile-product-lifecycle-management-plm (CVE-2024-21287). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-14644 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2020-14644)
vulnerability in Oracle weblogic-server (CVE-2020-14644). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-21445 KEV [KEV] Unsafe Deserialization in Oracle adf-faces (CVE-2022-21445)
vulnerability in Oracle adf-faces (CVE-2022-21445). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-3506 KEV [KEV] OS Command Injection in Oracle weblogic-server (CVE-2017-3506)
OS command injection in Oracle weblogic-server (CVE-2017-3506). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-2551 KEV [KEV] Vulnerability in Oracle fusion-middleware (CVE-2020-2551)
vulnerability in Oracle fusion-middleware (CVE-2020-2551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2016-8735 KEV [KEV] Vulnerability in Apache tomcat (CVE-2016-8735)
vulnerability in Apache tomcat (CVE-2016-8735). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2016-3427 KEV [KEV] Vulnerability in Oracle java-se-and-jrockit (CVE-2016-3427)
vulnerability in Oracle java-se-and-jrockit (CVE-2016-3427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-21839 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2023-21839)
vulnerability in Oracle weblogic-server (CVE-2023-21839). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-21587 KEV [KEV] Vulnerability in Oracle e-business-suite (CVE-2022-21587)
vulnerability in Oracle e-business-suite (CVE-2022-21587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-35587 KEV [KEV] Unsafe Deserialization in Oracle fusion-middleware (CVE-2021-35587)
vulnerability in Oracle fusion-middleware (CVE-2021-35587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2018-2628 KEV [KEV] Unsafe Deserialization in Oracle weblogic-server (CVE-2018-2628)
vulnerability in Oracle weblogic-server (CVE-2018-2628). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-4034 KEV [KEV] Out-of-Bounds Write in Red hat red-hat (CVE-2021-4034)
out-of-bounds write in Red hat red-hat (CVE-2021-4034). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2012-1710 KEV [KEV] Vulnerability in Oracle fusion-middleware (CVE-2012-1710)
vulnerability in Oracle fusion-middleware (CVE-2012-1710). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2013-0431 KEV [KEV] Vulnerability in Oracle java-runtime-environment-jre (CVE-2013-0431)
vulnerability in Oracle java-runtime-environment-jre (CVE-2013-0431). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-3010 KEV [KEV] Vulnerability in Oracle solaris (CVE-2019-3010)
vulnerability in Oracle solaris (CVE-2019-3010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-2423 KEV [KEV] Vulnerability in Oracle java-runtime-environment-jre (CVE-2013-2423)
vulnerability in Oracle java-runtime-environment-jre (CVE-2013-2423). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-0422 KEV [KEV] Vulnerability in Oracle java-runtime-environment-jre (CVE-2013-0422)
vulnerability in Oracle java-runtime-environment-jre (CVE-2013-0422). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2010-0840 KEV [KEV] Vulnerability in Oracle java-runtime-environment-jre (CVE-2010-0840)
vulnerability in Oracle java-runtime-environment-jre (CVE-2010-0840). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2013-2465 KEV [KEV] Vulnerability in Oracle java-se (CVE-2013-2465)
vulnerability in Oracle java-se (CVE-2013-2465). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2012-5076 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-5076)
vulnerability in Oracle java-se (CVE-2012-5076). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2012-0518 KEV [KEV] Open Redirect in Oracle fusion-middleware (CVE-2012-0518)
vulnerability in Oracle fusion-middleware (CVE-2012-0518). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-12617 KEV [KEV] Unrestricted File Upload in Apache tomcat (CVE-2017-12617)
vulnerability in Apache tomcat (CVE-2017-12617). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2018-1273 KEV [KEV] Code Injection in Vmware tanzu vmware-tanzu (CVE-2018-1273)
code injection in Vmware tanzu vmware-tanzu (CVE-2018-1273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2019-2616 KEV [KEV] Vulnerability in Oracle bi-publisher-formerly-xml-publisher (CVE-2019-2616)
vulnerability in Oracle bi-publisher-formerly-xml-publisher (CVE-2019-2616). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2012-0507 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-0507)
vulnerability in Oracle java-se (CVE-2012-0507). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2012-1723 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-1723)
vulnerability in Oracle java-se (CVE-2012-1723). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2012-4681 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-4681)
vulnerability in Oracle java-se (CVE-2012-4681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-1938 KEV [KEV] Privilege Escalation in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938)
vulnerability in org.apache.tomcat.embed:tomcat-embed-core (CVE-2020-1938). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `7.0.100` or later.
CVE-2015-4902 KEV [KEV] Vulnerability in Oracle java-se (CVE-2015-4902)
vulnerability in Oracle java-se (CVE-2015-4902). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2015-2590 KEV [KEV] Vulnerability in Oracle java-se (CVE-2015-2590)
vulnerability in Oracle java-se (CVE-2015-2590). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2011-3544 KEV [KEV] Vulnerability in Oracle java-se-jdk-and-jre (CVE-2011-3544)
vulnerability in Oracle java-se-jdk-and-jre (CVE-2011-3544). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2008-3431 KEV [KEV] Vulnerability in Oracle virtualbox (CVE-2008-3431)
vulnerability in Oracle virtualbox (CVE-2008-3431). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2017-10271 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2017-10271)
vulnerability in Oracle weblogic-server (CVE-2017-10271). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-14864 KEV [KEV] Path Traversal in Oracle intelligence-enterprise-edition (CVE-2020-14864)
path traversal in Oracle intelligence-enterprise-edition (CVE-2020-14864). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2019-2725 KEV [KEV] Vulnerability in Oracle weblogic-server (CVE-2019-2725)
vulnerability in Oracle weblogic-server (CVE-2019-2725). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2021-40438 KEV [KEV] SSRF (Server-Side Request Forgery) in Apache resf (CVE-2021-40438)
SSRF in Apache resf (CVE-2021-40438). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2020-2555 KEV [KEV] Unsafe Deserialization in Oracle multiple-products (CVE-2020-2555)
vulnerability in Oracle multiple-products (CVE-2020-2555). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2012-3152 KEV [KEV] Vulnerability in Oracle fusion-middleware (CVE-2012-3152)
vulnerability in Oracle fusion-middleware (CVE-2012-3152). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-14871 KEV [KEV] Out-of-Bounds Write in Oracle solaris-and-zettabyte-file-system-zfs (CVE-2020-14871)
out-of-bounds write in Oracle solaris-and-zettabyte-file-system-zfs (CVE-2020-14871). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2015-4852 KEV [KEV] Unsafe Deserialization in Oracle weblogic-server (CVE-2015-4852)
vulnerability in Oracle weblogic-server (CVE-2015-4852). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →