oracle

10,484 tracked vulnerabilities.

CVE-2025-61750 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 - Unauthorized Data Access via Query Component
Oct 21, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-61749 LOW
Oracle Database Server 23.4-23.9 - Authenticated Unauthorized Data Manipulation in Unified Audit
Oct 21, 2025
CVSS 2.7
EPSS 0.00
CVE-2025-61748 LOW
Oracle GraalVM and Java SE - Unauthenticated Improper Access Control
Oct 21, 2025
CVSS 3.7
EPSS 0.00
CVE-2025-53072 CRITICAL
Oracle Marketing 12.2.3-12.2.14 - Unauthenticated Remote Code Execution via HTTP
Oct 21, 2025
CVSS 9.8
EPSS 0.01
CVE-2025-53071 MEDIUM
Oracle Applications Framework 12.2.3-12.2.14 - Authenticated Improper Access Control in Upload Attachments
Oct 21, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-53070 MEDIUM
Oracle Solaris 11 - Denial of Service in Filesystem
Oct 21, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-53069 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Authenticated Denial of Service in Components Services
Oct 21, 2025
CVSS 4.9
EPSS 0.01
CVE-2025-53068 MEDIUM
Oracle Solaris 11 - Denial of Service via Kernel Resource Consumption
Oct 21, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-53067 MEDIUM
MySQL Server 9.0.0-9.4.0 - Authenticated Denial of Service in Server Optimizer
Oct 21, 2025
CVSS 4.9
EPSS 0.01
CVE-2025-53066 HIGH
Oracle GraalVM and Java SE - Unauthenticated Exposure of Sensitive Information via JAXP
Oct 21, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-53065 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Unauthenticated Out-of-bounds Read via PIA Core Technology
Oct 21, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-53064 MEDIUM
Oracle Applications Framework 12.2.3-12.2.14 - Authenticated Unauthorized Data Manipulation in Personalization
Oct 21, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-53063 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Out-of-bounds Read in PIA Core Technology
Oct 21, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-53062 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Denial of Service in InnoDB
Oct 21, 2025
CVSS 4.9
EPSS 0.01
CVE-2025-53061 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Authenticated Improper Access Control in PIA Core Technology
Oct 21, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-53060 MEDIUM
Oracle JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.4 - Unauthenticated Improper Access Control via Web Runtime SEC
Oct 21, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-53059 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Unauthorized Data Access via OpenSearch Dashboards
Oct 21, 2025
CVSS 4.9
EPSS 0.00
CVE-2025-53058 MEDIUM
Oracle Applications Manager 12.2.3-12.2.14 - Unauthenticated Improper Access Control via Application Logging Interfaces
Oct 21, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-53057 MEDIUM
Oracle Java SE 8u461, 11.0.28, 17.0.16, 21.0.8, 25; GraalVM - Unauthenticated Data Access
Oct 21, 2025
CVSS 5.9
EPSS 0.00
CVE-2025-53056 MEDIUM
Oracle JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.4 - Unauthenticated Improper Authorization via HTTP
Oct 21, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-53055 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.60-8.62 - Unauthenticated Out-of-bounds Read via HTTP
Oct 21, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-53054 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - Uncontrolled Resource Consumption in InnoDB
Oct 21, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-53053 MEDIUM
MySQL Server 8.0.0-8.0.43, 8.4.0-8.4.6, 9.0.0-9.4.0 - DoS and Data Manipulation via DML
Oct 21, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-53052 MEDIUM
Oracle Workflow 12.2.3-12.2.14 - Unauthenticated Improper Access Control in Workflow Notification Mailer
Oct 21, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-53051 LOW
Oracle Database Server 23.4-23.9 - Authenticated Out-of-bounds Read in RDBMS Functional Index
Oct 21, 2025
CVSS 2.7
EPSS 0.00
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV