oracle

10,484 tracked vulnerabilities.

CVE-2026-46830 MEDIUM
Oracle REST Data Services 24.2.0-26.1.0 - Unauthenticated Unauthorized Data Read via Mongoapi
May 28, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-46829 HIGH
Oracle Rest Data Services < 26.1.0 - Denial of Service
May 28, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-46828 HIGH
Oracle Payroll 12.2.3-12.2.15 - Authenticated Unauthorized Data Access and Modification via HTTP
May 28, 2026
CVSS 8.1
EPSS 0.00
CVE-2026-46827 HIGH
Oracle Payroll 12.2.3-12.2.15 - Authenticated Remote Code Execution in Self Service Manager
May 28, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-46826 HIGH
Oracle Payroll 12.2.3-12.2.15 - Authenticated Remote Code Execution via Internal Operations
May 28, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-46824 CRITICAL
Oracle Universal Work Queue 12.2.3-12.2.15 - Remote Code Execution via Work Provider
May 28, 2026
CVSS 9.9
EPSS 0.00
CVE-2026-46823 HIGH
Oracle Public Sector Financials (International) 12.2.6-12.2.15 - Unauthorized Data Access via Authorization Component
May 28, 2026
CVSS 7.7
EPSS 0.00
CVE-2026-46822 CRITICAL
Oracle iAssets 12.2.3-12.2.15 - Authenticated Remote Code Execution via HTTP
May 28, 2026
CVSS 9.9
EPSS 0.00
CVE-2026-46821 HIGH
Oracle Financials Common Modules 12.2.3-12.2.15 - Unauthorized Data Access via HTTP
May 28, 2026
CVSS 7.7
EPSS 0.00
CVE-2026-46820 HIGH
Oracle Financials Common Modules 12.2.3-12.2.15 - Authenticated Unauthorized Data Access via HTTP
May 28, 2026
CVSS 8.5
EPSS 0.00
CVE-2026-46819 CRITICAL
Oracle Internet Procurement Connector 12.2.3-12.2.15 - Unauthenticated Data Manipulation and Access via HTTP
May 28, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-46818 HIGH
Oracle Payments 12.2.3-12.2.15 - Unauthenticated Data Manipulation and Access via File Transmission
May 28, 2026
CVSS 7.4
EPSS 0.00
CVE-2026-46817 CRITICAL
Oracle Payments 12.2.3-12.2.15 - Unauthenticated Remote Code Execution via File Transmission
May 28, 2026
CVSS 9.8
EPSS 0.01
CVE-2026-46775 CRITICAL
Oracle REST Data Services 24.2.0-26.1.0 - Authenticated Remote Code Execution via HTTPS
May 28, 2026
CVSS 9.9
EPSS 0.00
CVE-2026-35277 HIGH
Oracle REST Data Services 24.2.0-26.1.0 - Authenticated Unauthorized Data Access and Modification via HTTPS
May 28, 2026
CVSS 8.1
EPSS 0.00
CVE-2026-35266 HIGH
Oracle Rest Data Services < 26.1.0 - Denial of Service
May 28, 2026
CVSS 7.9
EPSS 0.00
CVE-2026-34311 CRITICAL
Oracle Hospitality OPERA 5 Property Services <=5.6.28 - Unauthenticated RCE
May 28, 2026
CVSS 9.8
EPSS 0.00
CVE-2026-35255 MEDIUM
Oracle Cloud Native Environment Command Line Interface - Arbitrary Code Execution
May 06, 2026
CVSS 6.6
EPSS 0.00
CVE-2026-35254 MEDIUM
Oracle OCI CLI 3.77 - Unauthenticated Path Traversal via File Import
May 06, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-35253 MEDIUM
Oracle Macaron Tool v0.22.0 - Unauthenticated Origin Validation Error via HTTP
May 06, 2026
CVSS 4.7
EPSS 0.00
CVE-2026-35233 MEDIUM
Oracle Linux 8-10 - Out-of-bounds Read in ELF Parser via sh_link Field
May 01, 2026
CVSS 4.4
EPSS 0.00
CVE-2026-21996 LOW
Oracle Linux 8-10 - Denial of Service via Malicious ELF Binary
May 01, 2026
CVSS 3.3
EPSS 0.00
CVE-2026-35252 MEDIUM
Oracle Security Service 12.2.1.4.0 - Privilege Escalation
Apr 21, 2026
CVSS 6.4
EPSS 0.00
CVE-2026-35251 HIGH
Oracle VM VirtualBox 7.2.6 - Privilege Escalation
Apr 21, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-35250 LOW
Oracle VM VirtualBox 7.2.6 - Authenticated Partial Denial of Service
Apr 21, 2026
CVSS 2.3
EPSS 0.00
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV