oracle

10,484 tracked vulnerabilities.

CVE-2020-2739 HIGH
Oracle WebCenter Sites 12.2.1.3.0 - Info Disclosure
Apr 15, 2020
CVSS 7.4
EPSS 0.02
CVE-2020-2738 MEDIUM
Oracle Siebel CRM <20.2 - Info Disclosure
Apr 15, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-2737 MEDIUM
Oracle Database Server <19c - Privilege Escalation
Apr 15, 2020
CVSS 6.4
EPSS 0.01
CVE-2020-2735 HIGH
Oracle Database Server <19c - Privilege Escalation
Apr 15, 2020
CVSS 8.0
EPSS 0.01
CVE-2020-2734 LOW
Oracle Database Server <19c - Privilege Escalation
Apr 15, 2020
CVSS 2.4
EPSS 0.01
CVE-2020-2733 CRITICAL NUCLEI
Oracle JD Edwards EnterpriseOne Tools 9.2 - Unauthenticated Remote Code Execution via HTTP
Apr 15, 2020
CVSS 9.8
EPSS 0.19
CVE-2020-2706 MEDIUM
Oracle Construction and Engineering Primavera P6 <20.2.0.0 - Info D...
Apr 15, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-2594 MEDIUM
Oracle Primavera P6 EPPM 16.2.0.0-20.2.0.0 Authenticated SQL Injection
Apr 15, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-2553 MEDIUM
Oracle Knowledge 8.6.0-8.6.3 - Info Disclosure
Apr 15, 2020
CVSS 4.8
EPSS 0.01
CVE-2020-2524 MEDIUM
Oracle Knowledge 8.6.0-8.6.3 - Unauthenticated Denial of Service via HTTP
Apr 15, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-2522 MEDIUM
Oracle Knowledge <8.6.1 - Info Disclosure
Apr 15, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-2514 MEDIUM
Oracle Application Express < 19.2 - Authenticated Data Manipulation and Partial Denial of Service via HTTPS
Apr 15, 2020
CVSS 4.6
EPSS 0.01
CVE-2020-1730 MEDIUM
libssh < 0.8.9 and < 0.9.4 - Denial of Service via AES-CTR Cipher Cleanup
Apr 13, 2020
CVSS 5.3
EPSS 0.03
CVE-2020-11656 CRITICAL
SQLite < 3.31.1 - Use-After-Free in ALTER TABLE with ORDER BY Clause
Apr 09, 2020
CVSS 9.8
EPSS 0.08
CVE-2020-11655 HIGH
SQLite < 3.31.1 - Denial of Service via Malformed Window-Function Query
Apr 09, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-11620 HIGH
jackson-databind 2.9.0-2.9.10.3 - Deserialization of Untrusted Data via commons-jelly Gadget
Apr 07, 2020
CVSS 8.1
EPSS 0.06
CVE-2020-11619 HIGH
jackson-databind 2.9.0-2.9.10.3 - Deserialization of Untrusted Data via spring-aop MethodLocatingFactoryBean
Apr 07, 2020
CVSS 8.1
EPSS 0.04
CVE-2020-11612 HIGH
Netty 4.1.0-4.1.45 - Unbounded Memory Allocation in ZlibDecoder
Apr 07, 2020
CVSS 7.5
EPSS 0.09
CVE-2020-1927 MEDIUM
Apache HTTP Server 2.4.0-2.4.41 - URL Redirection to Untrusted Site via Encoded Newlines
Apr 02, 2020
CVSS 6.1
EPSS 0.57
CVE-2020-1954 MEDIUM
Apache CXF < 3.2.13 - Man-in-the-Middle Attack via JMX InstrumentationManager
Apr 01, 2020
CVSS 5.3
EPSS 0.06
CVE-2020-1934 MEDIUM
Apache HTTP Server 2.4.0-2.4.41 - Use of Uninitialized Resource in mod_proxy_ftp
Apr 01, 2020
CVSS 5.3
EPSS 0.52
CVE-2020-3909 CRITICAL
iCloud < 7.18 - Buffer Overflow in libxml2
Apr 01, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-11113 HIGH
FasterXML Jackson-Databind <2.9.10.4 - Code Injection
Mar 31, 2020
CVSS 8.8
EPSS 0.06
CVE-2020-11112 HIGH
FasterXML jackson-databind <2.9.10.4 - RCE
Mar 31, 2020
CVSS 8.8
EPSS 0.04
CVE-2020-11111 HIGH
FasterXML jackson-databind <2.9.10.4 - Code Injection
Mar 31, 2020
CVSS 8.8
EPSS 0.03
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV