Oracle Corporation

1,042 tracked vulnerabilities.

CVE-2026-34294 MEDIUM
Oracle Identity Manager Connector 12.2.1.4.0 - Privilege Escalation
Apr 21, 2026
CVSS 5.9
EPSS 0.00
CVE-2026-34293 MEDIUM
MySQL Server 8.0.0-8.0.45 - Authenticated Denial of Service in DML Component
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-34292 HIGH
Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0 - Server Takeover
Apr 21, 2026
CVSS 7.2
EPSS 0.00
CVE-2026-34291 HIGH
Oracle HTTP Server 12.2.1.4.0 - Privilege Escalation
Apr 21, 2026
CVSS 8.7
EPSS 0.00
CVE-2026-34290 HIGH
Oracle Corporation Oracle Identity Manager Connector < 12.2.1.4.0 - Denial of Service
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-34289 MEDIUM
Oracle Identity Manager Connector 12.2.1.4.0 - Info Disclosure
Apr 21, 2026
CVSS 5.9
EPSS 0.00
CVE-2026-34288 MEDIUM
Oracle Identity Manager Connector 12.2.1.4.0 - Info Disclosure
Apr 21, 2026
CVSS 5.9
EPSS 0.00
CVE-2026-34287 CRITICAL
Oracle Identity Manager Connector 12.2.1.4.0 - Unauthenticated Data Manipulation
Apr 21, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-34286 CRITICAL
Oracle Identity Manager Connector 12.2.1.4.0 - Unauthenticated Data Manipulation
Apr 21, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-34285 CRITICAL
Oracle Identity Manager Connector 12.2.1.4.0 - Unauthenticated Data Manipulation
Apr 21, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-34284 MEDIUM
Oracle BPM Suite 12.2.1.4.0 and 14.1.2.0.0 - Unauthorized Data Access
Apr 21, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-34283 MEDIUM
Oracle Identity Manager 12.2.1.4.0 and 14.1.2.0.0 - Unauthorized Data Access
Apr 21, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-34282 HIGH
Oracle Java SE & GraalVM DoS via Networking Component
Apr 21, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-34281 MEDIUM
Oracle Solaris 11.4 - Denial of Service in Kernel
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-34280 MEDIUM
Oracle PeopleSoft Enterprise HCM Human Resources 9.2 - Privilege Escalation
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-34279 CRITICAL
Oracle Enterprise Manager Base Platform 13.5 - Privilege Escalation
Apr 21, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-34278 MEDIUM
MySQL Server 8.0.0-8.0.45 - Authenticated Denial of Service in Server Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-34277 MEDIUM
PeopleSoft Enterprise PeopleTools 8.61-8.62 - Authenticated Improper Access Control in Fluid Core
Apr 21, 2026
CVSS 6.6
EPSS 0.00
CVE-2026-34276 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Group Replication Plugin
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-34275 CRITICAL
Oracle Advanced Inbound Telephony 12.2.3-12.2.15 - Product Takeover
Apr 21, 2026
CVSS 9.8
EPSS 0.00
CVE-2026-34274 MEDIUM
Oracle Configurator 12.2.3-12.2.15 - Unauthorized Data Access
Apr 21, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-34273 MEDIUM
Oracle GoldenGate 23.4-23.10 - Info Disclosure
Apr 21, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-34272 MEDIUM
MySQL Server 9.0.0-9.6.0 - Denial of Service in Optimizer
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-34271 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Group Replication Plugin
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-34270 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Group Replication Plugin
Apr 21, 2026
CVSS 6.5
EPSS 0.00
Products
MySQL Server 88 Java 60 PeopleSoft Enterprise PT PeopleTools 44 Oracle VM VirtualBox 42 Java SE JDK and JRE 31 Oracle WebCenter Content 29 WebLogic Server 26 Solaris Operating System 22 FLEXCUBE Private Banking 19 Oracle Java SE 17 WebCenter Sites 16 FLEXCUBE Universal Banking 15 Hospitality Suite8 15 JD Edwards EnterpriseOne Tools 15 Oracle Enterprise Manager Base Platform 15 Oracle GraalVM Enterprise Edition 15 Oracle Berkeley DB 14 Oracle GraalVM for JDK 14 BI Publisher (formerly XML Publisher) 13 PeopleSoft Enterprise PRTL Interaction Hub 12 Oracle WebCenter Sites 11 Hospitality Simphony 10 Oracle REST Data Services 10 Oracle WebCenter Enterprise Capture 10 Oracle WebCenter Portal 10 Agile PLM Framework 9 Automatic Service Request (ASR) 9 Hospitality OPERA 5 Property Services 8 Hospitality Reporting and Analytics 8 Identity Manager 8
Quick Filters
Critical CVEs With Exploits In CISA KEV