← Back

Oracle

oracle

12,314 CVEs • 1,114 products

Products (1,114)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Siebel Crm
siebel_crm
Http Server
http_server
Jrockit
jrockit
Helidon
helidon
Openjdk
openjdk
Mysql Cluster
mysql_cluster
Agile Plm
agile_plm
Marketing
marketing
Database
database
Javafx
javafx
Coherence
coherence
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Oracle8i
oracle8i
Istore
istore
Bi Publisher
bi_publisher

CVEs (12,314)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Canonical
DebianOracle
3Debian Linux
MysqlUbuntu Linux
Apr 23, 2026
May 10, 2007
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide...Show more
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.Show less
1Oracle
1E Business Suite
Apr 23, 2026
Apr 24, 2007
N/A· v4
N/A· v3
9.4 HIGH· v2
The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether t...Show more
The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.Show less
1Oracle
1E Business Suite
Apr 23, 2026
Apr 24, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
The ADI_BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND_DOCUMENTS table via the ADI_DISPLAY_REPORT function, when passed a certain parameter. NOT...Show more
The ADI_BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND_DOCUMENTS table via the ADI_DISPLAY_REPORT function, when passed a certain parameter. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.Show less
1Oracle
1Enterpriseone
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
7.2 HIGH· v2
Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01.
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.
1Oracle
1Peoplesoft Enterprise
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.
1Oracle
4Application Server
Collaboration SuiteDatabase Server+1 more
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown...Show more
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.Show less
1Oracle
1Enterprise Manager
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01.
1Oracle
1E Business Suite
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the Sales Online component for Oracle E-Business Suite 11.5.10 has unknown impact and remote authenticated attack vectors, aka APPS08.
1Oracle
1E Business Suite
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via (1) Application Object Library (APPS04), iStore (2) APPS05 and (3) APPS06, (4) iSupport (APPS07), (...Show more
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via (1) Application Object Library (APPS04), iStore (2) APPS05 and (3) APPS06, (4) iSupport (APPS07), (5) Trade Management (APPS09), (6) Applications Manager (APPS10), and (7) Oracle Report Manager (APPS03).Show less
1Oracle
1E Business Suite
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1) Common Applications (APPS01) and (2) iProcurement (APPS02).
1Oracle
1Collaboration Suite
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Collaborative Workspace in Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka OCS01.
1Oracle
1Application Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka AS05.
1Oracle
1Application Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
1Oracle
1Application Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03.
1Oracle
1Application Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02.
1Oracle
1Application Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS al...Show more
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.Show less
1Oracle
2Application Server
Database Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9...Show more
Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter, aka SES01.Show less
1Oracle
1Database Server
Apr 23, 2026
Apr 18, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aka DB13. NOTE: as of 20070424, Oracle has not disputed reliable claims that thi...Show more
Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aka DB13. NOTE: as of 20070424, Oracle has not disputed reliable claims that this is a buffer overflow involving the "mig utility."Show less