oracle

10,202 tracked vulnerabilities.

CVE-2025-30729 MEDIUM
Oracle Communications Order and Service Management 7.4.0/7.4.1/7.5.0 - Unauthorized Data Access and Partial DoS
Apr 15, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-30728 HIGH
Oracle Configurator 12.2.3-12.2.14 - Unauthenticated Unauthorized Data Access via HTTP
Apr 15, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-30727 CRITICAL
Oracle E-Business Suite 12.2.3-12.2.14 - Unauthenticated Remote Code Execution via iSurvey Module
Apr 15, 2025
CVSS 9.8
EPSS 0.01
CVE-2025-30726 MEDIUM
Oracle Application Object Library 12.2.3-12.2.14 - Unauthenticated Unauthorized Data Read via HTTP
Apr 15, 2025
CVSS 5.3
EPSS 0.01
CVE-2025-30725 MEDIUM
Oracle VM VirtualBox 7.1.6 - Authenticated Denial of Service and Data Manipulation
Apr 15, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-30724 HIGH
Oracle BI Publisher 7.6.0.0.0 and 12.2.1.4.0 - Unauthenticated Exposure of Sensitive Information via XML Services
Apr 15, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-30723 MEDIUM
Oracle BI Publisher 7.6.0.0.0/12.2.1.4.0 - Authenticated Data Manipulation and DoS via XML
Apr 15, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-30722 MEDIUM
Oracle MySQL <9.2.0 - Unauthorized Access
Apr 15, 2025
CVSS 5.3
EPSS 0.01
CVE-2025-30721 MEDIUM
MySQL Server 8.0.0-8.0.41, 8.4.0-8.4.4, 9.0.0-9.2.0 - Authenticated Denial of Service in UDF Component
Apr 15, 2025
CVSS 4.0
EPSS 0.00
CVE-2025-30720 MEDIUM
Oracle E-Business Suite - Orders <12.2.14 - Info Disclosure
Apr 15, 2025
CVSS 6.1
EPSS 0.01
CVE-2025-30719 MEDIUM
Oracle VM VirtualBox 7.1.6 - Denial of Service and Unauthorized Data Read
Apr 15, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-30718 MEDIUM
Oracle E-Business Suite <12.2.14 - Unauthorized Update
Apr 15, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-30717 MEDIUM
Oracle E-Business Suite - Unauthorized Access
Apr 15, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-30716 HIGH
Oracle Common Applications 12.2.3-12.2.14 - Unauthenticated Missing Authorization via HTTP
Apr 15, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-30715 MEDIUM
MySQL Server 8.0.0-8.0.41, 8.4.0-8.4.4, 9.0.0-9.2.0 - Authenticated Denial of Service
Apr 15, 2025
CVSS 4.9
EPSS 0.00
CVE-2025-30714 MEDIUM
Oracle MySQL Connectors 9.0.0-9.2.0 - Unauthorized Data Access via Connector/Python
Apr 15, 2025
CVSS 4.8
EPSS 0.01
CVE-2025-30713 MEDIUM
Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager 9.2 - Improper Access Control in Job Opening
Apr 15, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-30712 HIGH
Oracle VM VirtualBox 7.1.6 - Authenticated Integer Overflow in Core
Apr 15, 2025
CVSS 8.1
EPSS 0.00
CVE-2025-30711 MEDIUM
Oracle Applications Framework 12.2.3-12.2.14 - Authenticated Improper Access Control in Attachments File Upload
Apr 15, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-30710 MEDIUM
MySQL Cluster 8.0.0-8.0.41, 8.4.0-8.4.4, 9.0.0-9.2.0 - Authenticated Denial of Service in NDBCluster Plugin
Apr 15, 2025
CVSS 4.9
EPSS 0.00
CVE-2025-30709 MEDIUM
Oracle JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.2 - Unauthenticated Improper Access Control via Web Runtime SEC
Apr 15, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-30708 HIGH
Oracle User Management 12.2.4-12.2.14 - Unauthenticated Unauthorized Data Access via Search and Register Users
Apr 15, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-30707 HIGH
Oracle iStore 12.2.3-12.2.14 - Unauthenticated Unauthorized Data Access via User Management
Apr 15, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-30706 HIGH
Oracle MySQL Connectors 9.0.0-9.2.0 - Incorrect Default Permissions
Apr 15, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-30705 MEDIUM
MySQL Server 8.0.0-8.0.41, 8.4.0-8.4.4, 9.0.0-9.2.0 - Authenticated Denial of Service in Server: PS
Apr 15, 2025
CVSS 4.9
EPSS 0.00
Products
mysql 1,329 jre 798 jdk 786 solaris 553 database_server 513 vm_virtualbox 417 peoplesoft_enterprise_peopletools 352 e-business_suite 330 fusion_middleware 313 weblogic_server 307 mysql_server 277 linux 229 application_server 198 outside_in_technology 195 graalvm 187 peoplesoft_products 158 jd_edwards_enterpriseone_tools 150 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 enterprise_manager_base_platform 120 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 webcenter_portal 90 financial_services_analytical_applications_infrastructure 89
Quick Filters
Critical CVEs With Exploits In CISA KEV