Oracle Corporation

1,042 tracked vulnerabilities.

CVE-2026-34269 MEDIUM
Oracle PeopleSoft PeopleTools 8.61-8.62 Portal - Unauthorized Data Access
Apr 21, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-34268 LOW
Oracle Java SE & GraalVM Unauthenticated Sensitive Information Exposure
Apr 21, 2026
CVSS 2.9
EPSS 0.00
CVE-2026-34267 MEDIUM
MySQL Server 8.0.0-8.0.45 - Authenticated Denial of Service in Server Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-34266 MEDIUM
Oracle PeopleSoft Enterprise HCM Absence Management 9.2 - Privilege Escalation
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-22021 MEDIUM
Oracle Java SE & GraalVM for JDK - Unauthenticated Partial DoS via JSSE
Apr 21, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-22019 MEDIUM
Oracle PeopleSoft HCM Shared Components 9.2 - Unauthorized Data Access
Apr 21, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-22018 LOW
Oracle Java SE & GraalVM DoS via Libraries (8u481, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26)
Apr 21, 2026
CVSS 3.7
EPSS 0.00
CVE-2026-22017 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Optimizer
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-22016 HIGH
Oracle Java SE and GraalVM - Unauthorized Data Access
Apr 21, 2026
CVSS 7.5
EPSS 0.01
CVE-2026-22015 MEDIUM
Oracle MySQL Server 8.0.0-8.0.45 - Info Disclosure
Apr 21, 2026
CVSS 4.3
EPSS 0.00
CVE-2026-22014 LOW
Oracle User Management 12.2.7-12.2.15 - Privilege Escalation
Apr 21, 2026
CVSS 3.8
EPSS 0.00
CVE-2026-22013 MEDIUM
Oracle Java SE 8u481 - Memory Corruption
Apr 21, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-22011 HIGH
Oracle Applications DBA 12.2.3-12.2.15 - Privilege Escalation
Apr 21, 2026
CVSS 7.6
EPSS 0.00
CVE-2026-22010 HIGH
Oracle Financial Services Analytical Applications Infrastructure 8.0.7.9 - Info Disclosure
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-22009 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Optimizer
Apr 21, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-22008 LOW
Oracle Java SE 25.0.1 - Unauthenticated Data Manipulation
Apr 21, 2026
CVSS 3.7
EPSS 0.00
CVE-2026-22007 LOW
Oracle Java SE and GraalVM Security Component - Information Disclosure
Apr 21, 2026
CVSS 2.9
EPSS 0.00
CVE-2026-22006 MEDIUM
Oracle PeopleSoft HCM Human Resources 9.2 - Unauthorized Data Access
Apr 21, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-22005 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Server Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-22004 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in InnoDB
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-22003 MEDIUM
Oracle Java SE 8u481, 8u481-b50 and GraalVM Enterprise Edition 21.3.17 - Uncontrolled Resource Consumption in Hotspot
Apr 21, 2026
CVSS 6.0
EPSS 0.00
CVE-2026-22002 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Denial of Service in Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-22001 LOW
MySQL Server 8.0.0-8.0.45 - Info Disclosure
Apr 21, 2026
CVSS 2.7
EPSS 0.00
CVE-2026-21999 MEDIUM
Oracle Database Server 23.4.0-23.26.1 - Info Disclosure
Apr 21, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-21998 MEDIUM
MySQL Server 8.0.0-8.0.45, 8.4.0-8.4.8, 9.0.0-9.6.0 - Authenticated Denial of Service in Optimizer
Apr 21, 2026
CVSS 4.9
EPSS 0.00
Products
MySQL Server 88 Java 60 PeopleSoft Enterprise PT PeopleTools 44 Oracle VM VirtualBox 42 Java SE JDK and JRE 31 Oracle WebCenter Content 29 WebLogic Server 26 Solaris Operating System 22 FLEXCUBE Private Banking 19 Oracle Java SE 17 WebCenter Sites 16 FLEXCUBE Universal Banking 15 Hospitality Suite8 15 JD Edwards EnterpriseOne Tools 15 Oracle Enterprise Manager Base Platform 15 Oracle GraalVM Enterprise Edition 15 Oracle Berkeley DB 14 Oracle GraalVM for JDK 14 BI Publisher (formerly XML Publisher) 13 PeopleSoft Enterprise PRTL Interaction Hub 12 Oracle WebCenter Sites 11 Hospitality Simphony 10 Oracle REST Data Services 10 Oracle WebCenter Enterprise Capture 10 Oracle WebCenter Portal 10 Agile PLM Framework 9 Automatic Service Request (ASR) 9 Hospitality OPERA 5 Property Services 8 Hospitality Reporting and Analytics 8 Identity Manager 8
Quick Filters
Critical CVEs With Exploits In CISA KEV