← Back

Oracle

oracle

10,484 CVEs • 1,055 products

Products (1,055)

Click to collapse
Toggle
Mysql
mysql
Jre
jre
Jdk
jdk
Solaris
solaris
Mysql Server
mysql_server
Linux
linux
Graalvm
graalvm
Jrockit
jrockit
Http Server
http_server
Openjdk
openjdk
Siebel Crm
siebel_crm
Marketing
marketing
Agile Plm
agile_plm
Database
database
Javafx
javafx
Oracle9i
oracle9i
Berkeley Db
berkeley_db
Mysql Cluster
mysql_cluster
Oracle8i
oracle8i
Istore
istore
Vm Server
vm_server
Database 10g
database_10g

CVEs (10,484)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oracle
1E Business Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.
1Oracle
1Bea Product Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console.
1Oracle
1E Business Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors.
1Oracle
1E Business Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors.
1Oracle
1E Business Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.4 MEDIUM· v2
Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Bea Product Suite
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
1Oracle
1Application Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors.
1Oracle
1Industry Applications
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and...Show more
Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
3.6 LOW· v2
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC....Show more
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.Show less
1Oracle
1Application Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown v...Show more
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the pr...Show more
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.Show less
1Oracle
1Database Server
Apr 23, 2026
Oct 22, 2009
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.