oracle

10,202 tracked vulnerabilities.

CVE-2026-21985 MEDIUM
Oracle VM VirtualBox <7.2.4 - Privilege Escalation
Jan 20, 2026
CVSS 6.0
EPSS 0.00
CVE-2026-21984 HIGH
Oracle VM VirtualBox 7.1.14 and 7.2.4 - Authenticated Privilege Escalation in Core Component
Jan 20, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-21983 HIGH
Oracle VM VirtualBox 7.1.14 and 7.2.4 - Privilege Escalation
Jan 20, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-21982 HIGH
Oracle VM VirtualBox 7.1.14 and 7.2.4 - Unauthenticated Remote Code Execution
Jan 20, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-21981 MEDIUM
Oracle VM VirtualBox 7.1.14 and 7.2.4 - Authenticated Unauthorized Data Access and Partial Denial of Service
Jan 20, 2026
CVSS 4.6
EPSS 0.00
CVE-2026-21980 MEDIUM
Oracle Health Sciences Applications 7.0.1.0 - Unauthorized Update
Jan 20, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21978 MEDIUM
Oracle FLEXCUBE Universal Banking <14.8.0.0 - Unauthorized Access
Jan 20, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21976 HIGH
Oracle Analytics <8.2.0.0.0 - Unauthorized Create
Jan 20, 2026
CVSS 7.1
EPSS 0.00
CVE-2026-21975 MEDIUM
Oracle Java VM 19.3-19.29 and 21.3-21.20 - Authenticated Denial of Service via Oracle Net
Jan 20, 2026
CVSS 4.5
EPSS 0.00
CVE-2026-21974 MEDIUM
Oracle Life Sciences Central Designer 7.0.1.0 - Unauthenticated Exposure of Sensitive Information via HTTP
Jan 20, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-21973 HIGH
Oracle FLEXCUBE <14.8.0.1.0 - Info Disclosure
Jan 20, 2026
CVSS 8.1
EPSS 0.00
CVE-2026-21972 MEDIUM
Oracle E-Business Suite - Confidentiality Disclosure
Jan 20, 2026
CVSS 5.3
EPSS 0.00
CVE-2026-21971 MEDIUM
Oracle PeopleSoft <9.2 - Privilege Escalation
Jan 20, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-21970 MEDIUM
Oracle Health Sciences Applications 7.0.1.0 - Unauthorized Access
Jan 20, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21969 CRITICAL
Oracle Agile Product Lifecycle Management for Process 6.2.4 - Unauthenticated Remote Code Execution via Supplier Portal
Jan 20, 2026
CVSS 9.8
EPSS 0.00
CVE-2026-21968 MEDIUM
MySQL Server 8.0.0-8.0.44, 8.4.0-8.4.7, 9.0.0-9.5.0 - Authenticated Denial of Service in Server Optimizer
Jan 20, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21967 HIGH
Oracle Hospitality OPERA 5 - Unauthenticated Data Access and Partial Denial of Service via Opera Servlet
Jan 20, 2026
CVSS 8.6
EPSS 0.00
CVE-2026-21966 MEDIUM
Oracle Hospitality OPERA <5.6.27.4 - Info Disclosure
Jan 20, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-21965 LOW
MySQL Server 9.0.0-9.5.0 - Authenticated Partial Denial of Service in Pluggable Auth
Jan 20, 2026
CVSS 2.7
EPSS 0.00
CVE-2026-21964 MEDIUM
MySQL 8.0.0-8.0.44, 8.4.0-8.4.7, 9.0.0-9.5.0 - Authenticated Denial of Service in Thread Pooling
Jan 20, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-21963 MEDIUM
Oracle VM VirtualBox 7.1.14 and 7.2.4 - Authenticated Unauthorized Data Access
Jan 20, 2026
CVSS 6.0
EPSS 0.00
CVE-2026-21962 CRITICAL
Oracle HTTP Server & WebLogic Proxy Plug-in 12.2.1.4.0/14.1.1.0.0/14.1.2.0.0 - Unauthenticated Access Control
Jan 20, 2026
CVSS 10.0
EPSS 0.00
CVE-2026-21961 MEDIUM
Oracle PeopleSoft Enterprise HCM 9.2 - Unauthenticated Access Control in Company Dir / Org Chart Viewer
Jan 20, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-21960 MEDIUM
Oracle Applications DBA 12.2.3-12.2.15 - Authenticated Unauthorized Data Access via Java Utils
Jan 20, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-21959 MEDIUM
Oracle Workflow 12.2.3-12.2.15 - Authenticated Unauthorized Data Access via Workflow Loader
Jan 20, 2026
CVSS 4.9
EPSS 0.00
Products
mysql 1,329 jre 798 jdk 786 solaris 553 database_server 513 vm_virtualbox 417 peoplesoft_enterprise_peopletools 352 e-business_suite 330 fusion_middleware 313 weblogic_server 307 mysql_server 277 linux 229 application_server 198 outside_in_technology 195 graalvm 187 peoplesoft_products 158 jd_edwards_enterpriseone_tools 150 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 enterprise_manager_base_platform 120 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 webcenter_portal 90 financial_services_analytical_applications_infrastructure 89
Quick Filters
Critical CVEs With Exploits In CISA KEV