← Back

Oracle

oracle

12,827 CVEs • 1,116 products

Products (1,116)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Coherence
coherence
Helidon
helidon
Http Server
http_server
Jrockit
jrockit
Openjdk
openjdk
Mysql Cluster
mysql_cluster
Marketing
marketing
Database
database
Javafx
javafx
Essbase
essbase
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,827)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
1Oracle
1Peoplesoft Products
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to C...Show more
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM.Show less
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1754.
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Ma...Show more
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.Show less
1Oracle
1Hyperion
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unkn...Show more
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.Show less
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
1Oracle
1Sun Glassfish Enterprise Server
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
1Oracle
1Fusion Middleware
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.
6Canonical
DebianLibexpat Project+3 more
11Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+8 more
Apr 29, 2026
Jul 3, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU co...Show more
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.Show less
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jun 26, 2012
N/A· v4
N/A· v3
5.1 MEDIUM· v2
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain...Show more
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.Show less
1Oracle
1Mojarra
Apr 29, 2026
Jun 17, 2012
N/A· v4
N/A· v3
2.1 LOW· v2
Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.ge...Show more
Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.Show less
1Oracle
2Jdk
Jre
Apr 29, 2026
Jun 16, 2012
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
2Oracle
Sun
4Jdk
JdkJre+1 more
Apr 29, 2026
Jun 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality,...Show more
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.Show less
2Oracle
Sun
4Jdk
JdkJre+1 more
Apr 29, 2026
Jun 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.
2Oracle
Redhat
8Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+5 more
Aug 6, 2026
Jun 16, 2012
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af...Show more
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.Show less