oracle

10,202 tracked vulnerabilities.

CVE-2024-21170 MEDIUM
Oracle MySQL Connector/Python <= 8.4.0 - Unauthorized Data Access and Partial Denial of Service
Jul 16, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-21169 MEDIUM
Oracle Marketing 12.2.3-12.2.13 - Unauthenticated Improper Access Control via HTTP
Jul 16, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-21168 MEDIUM
Oracle JD Edwards <9.2.8.3 - Unauthorized Access
Jul 16, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-21167 HIGH
Oracle E-Business Suite - Unauthorized Access
Jul 16, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-21166 MEDIUM
MySQL Server 8.0.0-8.0.36 and 8.3.0 - Authenticated Unauthorized Data Modification and Denial of Service in InnoDB
Jul 16, 2024
CVSS 5.9
EPSS 0.00
CVE-2024-21165 MEDIUM
MySQL < 8.0.37 - Authenticated Denial of Service in Pluggable Auth
Jul 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21164 LOW
Oracle VM VirtualBox < 7.0.20 - Authenticated Out-of-bounds Read
Jul 16, 2024
CVSS 2.5
EPSS 0.00
CVE-2024-21163 MEDIUM
MySQL Server < 8.0.37 and <= 8.4.0 - Authenticated Denial of Service in Optimizer
Jul 16, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-21162 MEDIUM
MySQL Server < 8.0.37 and <= 8.4.0 - Authenticated Denial of Service in Optimizer
Jul 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21161 MEDIUM
Oracle VM VirtualBox < 7.0.20 - Denial of Service via Uncontrolled Resource Consumption
Jul 16, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-21160 MEDIUM
MySQL 8.0.0-8.0.36 and 8.3.0 - Authenticated Denial of Service in InnoDB
Jul 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21159 MEDIUM
MySQL Server < 8.0.36 and 8.3.0 - Authenticated Denial of Service in InnoDB
Jul 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21158 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.59-8.61 - Authenticated Unauthorized Data Access via Portal
Jul 16, 2024
CVSS 6.4
EPSS 0.00
CVE-2024-21157 MEDIUM
MySQL 8.0.0-8.0.36 and 8.4.0 - Authenticated Denial of Service in InnoDB
Jul 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21155 MEDIUM
Oracle ZFS Storage Appliance Kit <8.8 - Info Disclosure
Jul 16, 2024
CVSS 4.7
EPSS 0.00
CVE-2024-21154 MEDIUM
Oracle PeopleSoft Enterprise HCM Human Resources 9.2 - Cross-Site Scripting
Jul 16, 2024
CVSS 4.3
EPSS 0.01
CVE-2024-21153 HIGH
Oracle Process Manufacturing 12.2.13 - Unauthorized Data Access/Modification via Quality Management Specs
Jul 16, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-21152 HIGH
Oracle Process Manufacturing Financials 12.2.12-12.2.13 - Sensitive Information Exposure in Allocation Rules
Jul 16, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-21151 LOW
Oracle Solaris 11 - Authenticated Partial Denial of Service in Filesystem
Jul 16, 2024
CVSS 3.3
EPSS 0.00
CVE-2024-21150 MEDIUM
Oracle JD Edwards EnterpriseOne Tools < 9.2.8.2 - Unauthenticated Improper Access Control via Web Runtime SEC
Jul 16, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21149 HIGH
Oracle Enterprise Asset Management 12.2.11-12.2.13 - Incorrect Authorization in Work Definition Issues
Jul 16, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-21148 MEDIUM
Oracle E-Business Suite - Privilege Escalation
Jul 16, 2024
CVSS 4.8
EPSS 0.00
CVE-2024-21147 HIGH
Netapp Active IQ Unified Manager - Information Disclosure
Jul 16, 2024
CVSS 7.4
EPSS 0.01
CVE-2024-21146 HIGH
Oracle Trade Management 12.2.3-12.2.13 - Authenticated Unauthorized Data Access and Modification via GL Accounts
Jul 16, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-21145 MEDIUM
Oracle GraalVM 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1 - Improper Access Control in 2D Component
Jul 16, 2024
CVSS 4.8
EPSS 0.00
Products
mysql 1,329 jre 798 jdk 786 solaris 553 database_server 513 vm_virtualbox 417 peoplesoft_enterprise_peopletools 352 e-business_suite 330 fusion_middleware 313 weblogic_server 307 mysql_server 277 linux 229 application_server 198 outside_in_technology 195 graalvm 187 peoplesoft_products 158 jd_edwards_enterpriseone_tools 150 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 enterprise_manager_base_platform 120 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 webcenter_portal 90 financial_services_analytical_applications_infrastructure 89
Quick Filters
Critical CVEs With Exploits In CISA KEV