← Back

Oracle

oracle

12,314 CVEs • 1,114 products

Products (1,114)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Http Server
http_server
Jrockit
jrockit
Helidon
helidon
Openjdk
openjdk
Mysql Cluster
mysql_cluster
Agile Plm
agile_plm
Marketing
marketing
Database
database
Javafx
javafx
Coherence
coherence
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,314)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oracle
1Database Server
Apr 23, 2026
Nov 8, 2007
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
2Bea
Oracle
5Tuxedo
Weblogic IntegrationWeblogic Portal+2 more
Apr 23, 2026
Oct 18, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind,...Show more
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.Show less
1Oracle
2Enterprise Grid Console Server
Opmn Daemon
Apr 23, 2026
Oct 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in...Show more
Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175. NOTE: this might be the same issue as CVE-2007-0282 or CVE-2007-0280, but there are insufficient details to be sure.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 18, 2007
N/A· v4
N/A· v3
7.1 HIGH· v2
Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information....Show more
Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.Show less
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has unknown impact and remote attack vectors, aka PSE_HCM01.
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE02.
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.
1Oracle
3Application Server
Database ServerEnterprise Manager
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.
1Oracle
1Database Server
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown impact and remote attack vectors, aka EM01.
1Oracle
1E Business Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08.
1Oracle
1E Business Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector Human Resources (APP03) and (2) Quoting component (APP06).
1Oracle
1E Business Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component (APP01), (2) Contracts Integration (APP02), (3)...Show more
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component (APP01), (2) Contracts Integration (APP02), (3) Applications Manager (APP04), (4) Marketing component (APP05), and (5) Exchange component (APP07).Show less
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11.
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact an...Show more
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10.Show less
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or A...Show more
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9.Show less
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors,...Show more
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS08.Show less
1Oracle
1Application Server
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, aka AS07.
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors...Show more
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS06.Show less
1Oracle
2Application Server
Database Server
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unkn...Show more
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unknown impact and remote attack vectors, aka AS05.Show less
1Oracle
2Application Server
Collaboration Suite
Apr 23, 2026
Oct 17, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04.