oracle

10,484 tracked vulnerabilities.

CVE-2024-21076 HIGH
Oracle Trade Management 12.2.3-12.2.13 - Unauthenticated Unauthorized Data Access via Offer LOV
Apr 16, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-21075 HIGH
Oracle E-Business Suite <12.2.14 - Unauthorized Access
Apr 16, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-21074 HIGH
Oracle Trade Management 12.2.3-12.2.13 - Unauthenticated Improper Access Control in Finance LOV
Apr 16, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-21073 HIGH
Oracle Trade Management 12.2.3-12.2.13 - Unauthenticated Exposure of Sensitive Information in Claim LOV
Apr 16, 2024
CVSS 7.5
EPSS 0.01
CVE-2024-21072 MEDIUM
Oracle E-Business Suite - Data Provider UI - Info Disclosure
Apr 16, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21071 CRITICAL
Oracle Workflow 12.2.3-12.2.13 - Authenticated Remote Code Execution via Admin Screens and Grants UI
Apr 16, 2024
CVSS 9.1
EPSS 0.01
CVE-2024-21070 MEDIUM
Oracle PeopleSoft <8.61 - Info Disclosure
Apr 16, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-21069 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in DDL Component
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21068 LOW
Oracle GraalVM - Unauthenticated Data Manipulation via Hotspot Component
Apr 16, 2024
CVSS 3.7
EPSS 0.01
CVE-2024-21067 HIGH
Oracle Enterprise Manager Base Platform 13.5.0.0 - Authenticated Privilege Escalation in Host Management
Apr 16, 2024
CVSS 8.8
EPSS 0.00
CVE-2024-21066 MEDIUM
Oracle Database Server 19.3-19.22 and 21.3-21.13 - Authenticated Cross-Site Scripting in RDBMS Component
Apr 16, 2024
CVSS 4.2
EPSS 0.00
CVE-2024-21065 MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.59-8.61 - Unauthenticated Open Redirect in Workflow
Apr 16, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21064 MEDIUM
Oracle Business Intelligence Enterprise Edition 7.0.0.0.0/12.2.1.4.0 - Unauthorized Data Access
Apr 16, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-21063 MEDIUM
Oracle PeopleSoft Enterprise HCM Benefits Administration 9.2 - Unauthorized Data Access and Partial Denial of Service
Apr 16, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21062 MEDIUM
MySQL Server < 8.0.36 and 8.3.0 - Authenticated Denial of Service in Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21061 MEDIUM
MySQL Server <= 8.0.35 and 8.2.0 - Authenticated Denial of Service in Audit Plug-in
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21060 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service in Data Dictionary
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21059 HIGH
Oracle Solaris 11 - Privilege Escalation in Utility Component
Apr 16, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-21058 MEDIUM
Oracle Database Server <21.13 - Privilege Escalation
Apr 16, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-21057 MEDIUM
MySQL Server < 8.0.35 - Authenticated Denial of Service in Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21056 MEDIUM
MySQL Server <= 8.0.34 - Authenticated Denial of Service in DML Component
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21055 MEDIUM
MySQL Server <= 8.0.35 - Authenticated Denial of Service in Optimizer
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21054 MEDIUM
MySQL Server <= 8.0.36 and 8.3.0 - Authenticated Denial of Service via Optimizer Component
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21053 MEDIUM
MySQL Server <= 8.0.34 - Authenticated Denial of Service via Server: DML
Apr 16, 2024
CVSS 4.9
EPSS 0.01
CVE-2024-21052 MEDIUM
MySQL Server <= 8.0.34 - Authenticated Denial of Service in DML Component
Apr 16, 2024
CVSS 4.9
EPSS 0.01
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV