Oracle Corporation

742 tracked vulnerabilities.

CVE-2026-35255 MEDIUM
Oracle Cloud Native Environment Command Line Interface - Arbitrary Code Execution
May 06, 2026
CVSS 6.6
EPSS 0.00
CVE-2026-35254 MEDIUM
Oracle OCI CLI 3.77 - Unauthenticated Path Traversal via File Import
May 06, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-35253 MEDIUM
Oracle Macaron Tool v0.22.0 - Unauthenticated Origin Validation Error via HTTP
May 06, 2026
CVSS 4.7
EPSS 0.00
CVE-2026-35228 HIGH
Oracle MCP Server Helper Tool 1.0.1-1.0.156 - SQL Injection
May 05, 2026
CVSS 8.7
EPSS 0.00
CVE-2026-35233 MEDIUM
Oracle Linux 8-10 - Out-of-bounds Read in ELF Parser via sh_link Field
May 01, 2026
CVSS 4.4
EPSS 0.00
CVE-2026-21996 LOW
Oracle Linux 8-10 - Denial of Service via Malicious ELF Binary
May 01, 2026
CVSS 3.3
EPSS 0.00
CVE-2026-35252 MEDIUM
Oracle Security Service 12.2.1.4.0 - Privilege Escalation
Apr 21, 2026
CVSS 6.4
EPSS 0.00
CVE-2026-35251 HIGH
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-35250 LOW
Oracle VM VirtualBox 7.2.6 - Authenticated Partial Denial of Service
Apr 21, 2026
CVSS 2.3
EPSS 0.00
CVE-2026-35249 LOW
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 3.2
EPSS 0.00
CVE-2026-35248 MEDIUM
Oracle VM VirtualBox 7.2.6 - Authenticated Unauthorized Data Access and Partial Denial of Service
Apr 21, 2026
CVSS 5.0
EPSS 0.00
CVE-2026-35247 MEDIUM
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 6.0
EPSS 0.00
CVE-2026-35246 HIGH
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-35245 HIGH
Oracle VM VirtualBox 7.2.6 - Unauthenticated Denial of Service via RDP
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-35244 MEDIUM
Oracle Hyperion Infrastructure Technology 11.2.24.0.000 - Privilege Escalation
Apr 21, 2026
CVSS 5.2
EPSS 0.00
CVE-2026-35243 HIGH
Oracle ADF 12.2.1.4.0 - Privilege Escalation
Apr 21, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-35242 HIGH
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-35241 MEDIUM
Oracle PeopleSoft Enterprise CS Student Records 9.2 - Info Disclosure
Apr 21, 2026
CVSS 5.7
EPSS 0.00
CVE-2026-35240 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in Server Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35239 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in Server: DML
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35238 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in InnoDB
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35237 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in InnoDB
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35236 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in InnoDB
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35235 MEDIUM
MySQL Server 9.0.0-9.6.0 - Authenticated Denial of Service in GIS Component
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-35234 MEDIUM
MySQL Server 9.0.0-9.6.0 - Authenticated Denial of Service in Server Partition Component
Apr 21, 2026
CVSS 4.9
EPSS 0.00
Products
MySQL Server 87 Java 60 PeopleSoft Enterprise PT PeopleTools 36 Oracle VM VirtualBox 32 Solaris Operating System 22 FLEXCUBE Private Banking 19 Oracle Java SE 17 WebCenter Sites 16 FLEXCUBE Universal Banking 15 Hospitality Suite8 15 Oracle GraalVM Enterprise Edition 15 Oracle Berkeley DB 14 Oracle GraalVM for JDK 14 BI Publisher (formerly XML Publisher) 13 PeopleSoft Enterprise PRTL Interaction Hub 12 WebLogic Server 12 Hospitality Simphony 10 Agile PLM Framework 9 Automatic Service Request (ASR) 9 Hospitality OPERA 5 Property Services 8 Hospitality Reporting and Analytics 8 FLEXCUBE Enterprise Limits and Collateral Management 7 Hospitality Guest Access 7 Marketing 7 Oracle Database 7 Oracle Identity Manager Connector 7 Primavera P6 Enterprise Project Portfolio Management 7 Sun ZFS Storage Appliance Kit (AK) Software 7 Application Object Library 6 Hospitality Hotel Mobile 6
Quick Filters
Critical CVEs With Exploits In CISA KEV