oracle

10,484 tracked vulnerabilities.

CVE-2022-39428 CRITICAL
Oracle E-Business Suite - Upload RCE
Oct 18, 2022
CVSS 9.8
EPSS 0.36
CVE-2022-39427 HIGH
Oracle VM VirtualBox <6.1.40 - Privilege Escalation
Oct 18, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-39426 HIGH
Oracle VM VirtualBox < 6.1.40 - Unauthenticated Remote Code Execution via VRDP
Oct 18, 2022
CVSS 8.1
EPSS 0.01
CVE-2022-39425 HIGH
Oracle VM VirtualBox < 6.1.40 - Unauthenticated Remote Code Execution via VRDP
Oct 18, 2022
CVSS 8.1
EPSS 0.02
CVE-2022-39424 HIGH
Oracle VM VirtualBox < 6.1.40 - Unauthenticated Remote Code Execution via VRDP
Oct 18, 2022
CVSS 8.1
EPSS 0.01
CVE-2022-39423 MEDIUM
Oracle VM VirtualBox <6.1.38 - Privilege Escalation
Oct 18, 2022
CVSS 6.0
EPSS 0.01
CVE-2022-39422 HIGH
Oracle VM VirtualBox < 6.1.38 - Authenticated Privilege Escalation
Oct 18, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-39421 HIGH
Oracle VM VirtualBox < 6.1.40 - Authenticated Remote Code Execution
Oct 18, 2022
CVSS 7.3
EPSS 0.00
CVE-2022-39420 MEDIUM
Oracle Transportation Management <6.5.1 - Info Disclosure
Oct 18, 2022
CVSS 5.4
EPSS 0.00
CVE-2022-39419 MEDIUM
Oracle Database Server <21c - Confidentiality Impact
Oct 18, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-39417 MEDIUM
Oracle Solaris 11 - Denial of Service in Filesystem
Oct 18, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-39412 HIGH
Oracle Access Manager 12.2.1.4.0 - Unauthenticated Missing Authentication for Critical Function
Oct 18, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-39411 MEDIUM
Oracle Transportation Management <6.5.1 - RCE
Oct 18, 2022
CVSS 4.9
EPSS 0.01
CVE-2022-39410 MEDIUM
MySQL < 8.0.30 - Authenticated Denial of Service in Server Optimizer
Oct 18, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-39409 LOW
Oracle Transportation Management 6.4.3 and 6.5.1 - Authenticated Partial Denial of Service via HTTP
Oct 18, 2022
CVSS 2.7
EPSS 0.01
CVE-2022-39408 MEDIUM
MySQL Server < 8.0.30 - Authenticated Denial of Service in Optimizer
Oct 18, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-39407 MEDIUM
Oracle PeopleSoft <8.60 - Unauthorized Access
Oct 18, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-39406 HIGH
Oracle PeopleSoft Enterprise Common Components 9.2 - Authenticated Improper Access Control in Approval Framework
Oct 18, 2022
CVSS 8.1
EPSS 0.01
CVE-2022-39405 MEDIUM
Oracle Access Manager 12.2.1.3.0 - Unauthenticated Improper Access Control
Oct 18, 2022
CVSS 5.3
EPSS 0.01
CVE-2022-39404 MEDIUM
Oracle MySQL Installer <= 1.6.3 - Authenticated Partial Denial of Service and Data Manipulation
Oct 18, 2022
CVSS 4.2
EPSS 0.00
CVE-2022-39403 LOW
Oracle MySQL <8.0.30 - Privilege Escalation
Oct 18, 2022
CVSS 3.9
EPSS 0.00
CVE-2022-39402 MEDIUM
Oracle MySQL <8.0.30 - Info Disclosure
Oct 18, 2022
CVSS 4.3
EPSS 0.00
CVE-2022-39401 MEDIUM
Oracle Solaris 11 - Denial of Service in Kernel
Oct 18, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-39400 MEDIUM
MySQL Server < 8.0.30 - Authenticated Denial of Service in Optimizer
Oct 18, 2022
CVSS 4.9
EPSS 0.01
CVE-2022-39399 LOW
Oracle GraalVM 20.3.7, 21.3.3, 22.2.0 - Unauthenticated Data Manipulation via HTTP
Oct 18, 2022
CVSS 3.7
EPSS 0.01
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV