← Back

Oracle

oracle

10,672 CVEs • 1,055 products

Products (1,055)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Jrockit
jrockit
Http Server
http_server
Openjdk
openjdk
Mysql Cluster
mysql_cluster
Siebel Crm
siebel_crm
Agile Plm
agile_plm
Marketing
marketing
Database
database
Javafx
javafx
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Coherence
coherence
Oracle8i
oracle8i
Istore
istore
Vm Server
vm_server

CVEs (10,672)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown...Show more
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials Business Intelligence.Show less
1Oracle
2Iplanet Web Server
Sun Products Suite Java System Web Server
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown ve...Show more
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.Show less
1Oracle
2Database Server
Enterprise Manager Grid Control
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platfor...Show more
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Performance Advisories/UIs.Show less
1Oracle
1Fusion Middleware
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle MapViewer component in Oracle Fusion Middleware 10.1.3.1 allows remote attackers to affect confidentiality via unknown vectors related to Oracle Maps.
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
1Oracle
1Peoplesoft Products
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to C...Show more
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect confidentiality via unknown vectors related to CM.Show less
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework, a different vulnerability than CVE-2012-1754.
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Ma...Show more
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.Show less
1Oracle
1Hyperion
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.
1Oracle
1Siebel Crm
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Portal Framework.
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unkn...Show more
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.Show less
1Oracle
1E Business Suite
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
1Oracle
1Sun Glassfish Enterprise Server
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
1Oracle
1Fusion Middleware
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.
6Canonical
DebianLibexpat Project+3 more
11Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+8 more
Apr 29, 2026
Jul 3, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU co...Show more
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.Show less
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jun 26, 2012
N/A· v4
N/A· v3
5.1 MEDIUM· v2
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain...Show more
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.Show less