← Back

Oracle

oracle

12,316 CVEs • 1,115 products

Products (1,115)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Http Server
http_server
Jrockit
jrockit
Helidon
helidon
Openjdk
openjdk
Mysql Cluster
mysql_cluster
Agile Plm
agile_plm
Marketing
marketing
Database
database
Javafx
javafx
Coherence
coherence
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,316)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oracle
1Application Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors.
1Oracle
1Industry Applications
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and...Show more
Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
3.6 LOW· v2
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC....Show more
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.Show less
1Oracle
1Application Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown v...Show more
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the pr...Show more
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC).
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS.
1Oracle
2Opensolaris
Solaris
Apr 23, 2026
Oct 1, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2)...Show more
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages.Show less
1Oracle
1E Business Suite 11i
Apr 23, 2026
Sep 14, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle A...Show more
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04).Show less
1Oracle
1E Business Suite
Apr 23, 2026
Sep 14, 2009
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) rem...Show more
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).Show less