← Back

Oracle

oracle

10,484 CVEs • 1,055 products

Products (1,055)

Click to collapse
Toggle
Mysql
mysql
1,329 CVEs
Jre
jre
799 CVEs
Jdk
jdk
787 CVEs
Solaris
solaris
555 CVEs
Database Server
database_server
516 CVEs
Vm Virtualbox
vm_virtualbox
427 CVEs
Peoplesoft Enterprise Peopletools
peoplesoft_enterprise_peopletools
355 CVEs
E Business Suite
e-business_suite
337 CVEs
Weblogic Server
weblogic_server
322 CVEs
Fusion Middleware
fusion_middleware
313 CVEs
Mysql Server
mysql_server
278 CVEs
Linux
linux
229 CVEs
Application Server
application_server
198 CVEs
Outside In Technology
outside_in_technology
195 CVEs
Graalvm
graalvm
188 CVEs
Jd Edwards Enterpriseone Tools
jd_edwards_enterpriseone_tools
164 CVEs
Peoplesoft Products
peoplesoft_products
158 CVEs
Enterprise Manager Base Platform
enterprise_manager_base_platform
135 CVEs
Retail Xstore Point Of Service
retail_xstore_point_of_service
125 CVEs
Communications Cloud Native Core Policy
communications_cloud_native_core_policy
125 CVEs
Zfs Storage Appliance Kit
zfs_storage_appliance_kit
117 CVEs
Jrockit
jrockit
107 CVEs
Enterprise Manager Ops Center
enterprise_manager_ops_center
107 CVEs
Http Server
http_server
105 CVEs
Webcenter Portal
webcenter_portal
100 CVEs
Openjdk
openjdk
98 CVEs
Supply Chain Products Suite
supply_chain_products_suite
97 CVEs
Flexcube Universal Banking
flexcube_universal_banking
95 CVEs
Primavera Unifier
primavera_unifier
95 CVEs
Financial Services Analytical Applications Infrastructure
financial_services_analytical_applications_infrastructure
90 CVEs
Business Intelligence
business_intelligence
85 CVEs
Enterprise Manager Grid Control
enterprise_manager_grid_control
84 CVEs
Siebel Crm
siebel_crm
80 CVEs
Communications Diameter Signaling Router
communications_diameter_signaling_router
80 CVEs
Peoplesoft Enterprise
peoplesoft_enterprise
75 CVEs
Flexcube Private Banking
flexcube_private_banking
75 CVEs
Communications Cloud Native Core Binding Support Function
communications_cloud_native_core_binding_support_function
75 CVEs
Marketing
marketing
74 CVEs
Communications Session Route Manager
communications_session_route_manager
74 CVEs
Banking Platform
banking_platform
72 CVEs
Communications Unified Inventory Management
communications_unified_inventory_management
72 CVEs
Application Testing Suite
application_testing_suite
71 CVEs
Agile Plm
agile_plm
71 CVEs
Communications Session Report Manager
communications_session_report_manager
69 CVEs
Communications Element Manager
communications_element_manager
68 CVEs
Database
database
66 CVEs
Communications Billing And Revenue Management
communications_billing_and_revenue_management
66 CVEs
Javafx
javafx
64 CVEs
Webcenter Sites
webcenter_sites
64 CVEs
Collaboration Suite
collaboration_suite
63 CVEs
Primavera P6 Enterprise Project Portfolio Management
primavera_p6_enterprise_project_portfolio_management
63 CVEs
Primavera Gateway
primavera_gateway
59 CVEs
Mysql Enterprise Monitor
mysql_enterprise_monitor
58 CVEs
Advanced Outbound Telephony
advanced_outbound_telephony
58 CVEs
Graalvm For Jdk
graalvm_for_jdk
58 CVEs
Instantis Enterprisetrack
instantis_enterprisetrack
57 CVEs
Communications Instant Messaging Server
communications_instant_messaging_server
57 CVEs
Retail Customer Management And Segmentation Foundation
retail_customer_management_and_segmentation_foundation
57 CVEs
Agile Product Lifecycle Management
agile_product_lifecycle_management
56 CVEs
Retail Merchandising System
retail_merchandising_system
56 CVEs
Commerce Guided Search
commerce_guided_search
54 CVEs
Siebel Ui Framework
siebel_ui_framework
53 CVEs
Oracle9i
oracle9i
52 CVEs
Berkeley Db
berkeley_db
51 CVEs
Communications Policy Management
communications_policy_management
50 CVEs
Communications Cloud Native Core Automated Test Suite
communications_cloud_native_core_automated_test_suite
50 CVEs
Mysql Cluster
mysql_cluster
49 CVEs
Financial Services Software
financial_services_software
48 CVEs
Application Express
application_express
47 CVEs
One To One Fulfillment
one-to-one_fulfillment
47 CVEs
Oracle8i
oracle8i
46 CVEs
Communications Cloud Native Core Network Function Cloud Native Environment
communications_cloud_native_core_network_function_cloud_native_environment
46 CVEs
Retail Service Backbone
retail_service_backbone
45 CVEs
Communications Operations Monitor
communications_operations_monitor
45 CVEs
Flexcube Investor Servicing
flexcube_investor_servicing
45 CVEs
Communications Services Gatekeeper
communications_services_gatekeeper
45 CVEs
Peoplesoft And Jdedwards Product Suite
peoplesoft_and_jdedwards_product_suite
44 CVEs
Jd Edwards Enterpriseone Orchestrator
jd_edwards_enterpriseone_orchestrator
44 CVEs
Istore
istore
42 CVEs
Mysql Workbench
mysql_workbench
42 CVEs
Webcenter Content
webcenter_content
42 CVEs
Communications Cloud Native Core Unified Data Repository
communications_cloud_native_core_unified_data_repository
42 CVEs
Communications Messaging Server
communications_messaging_server
41 CVEs
Communications Pricing Design Center
communications_pricing_design_center
41 CVEs
Glassfish Server
glassfish_server
40 CVEs
Blockchain Platform
blockchain_platform
40 CVEs
Business Intelligence Publisher
business_intelligence_publisher
39 CVEs
Complex Maintenance Repair And Overhaul
complex_maintenance_repair_and_overhaul
39 CVEs
Retail Integration Bus
retail_integration_bus
39 CVEs
Retail Order Broker
retail_order_broker
39 CVEs
Banking Virtual Account Management
banking_virtual_account_management
39 CVEs
Communications Evolved Communications Application Server
communications_evolved_communications_application_server
39 CVEs
Communications Network Charging And Control
communications_network_charging_and_control
39 CVEs
Vm Server
vm_server
38 CVEs
Hospitality Simphony
hospitality_simphony
38 CVEs
Utilities Framework
utilities_framework
38 CVEs
Database 10g
database_10g
37 CVEs
Jd Edwards Enterpriseone
jd_edwards_enterpriseone
37 CVEs
Sun Products Suite
sun_products_suite
37 CVEs
Data Integrator
data_integrator
37 CVEs

CVEs (10,484)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5440
1Oracle
1Timesten In Memory Database
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous informat...Show more
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.Show less
CVE-2008-5439
1Oracle
1Database 10g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2008-5437
1Oracle
3Database 10g
Database 11iDatabase 9i
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB...Show more
Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB.Show less
CVE-2008-5436
1Oracle
2Database 10g
Database 9i
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVE-2008-4015
1Oracle
1Database 10g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH.
CVE-2008-4006
1Oracle
1Secure Backup
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2008-3999
1Oracle
2Database 10g
Database 9i
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVE-2008-3997
1Oracle
1Database 10g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect availability, related to SYS.DBMS_XSOQ_ODBO.
CVE-2008-3981
1Oracle
1Secure Backup
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2008-3979
1Oracle
1Database 10g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous inform...Show more
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger.Show less
CVE-2008-3978
1Oracle
1Database 10g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2008-3974
1Oracle
1Database 9i
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVE-2008-3973
1Oracle
2Database 10g
Database 11g
Apr 23, 2026
Jan 14, 2009
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors.
CVE-2008-5266
2Oracle
Sun
2Glassfish Server
Java System Application Server
Apr 23, 2026
Nov 28, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows rem...Show more
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.Show less
CVE-2008-2992
2Adobe
Oracle
3Acrobat
Acrobat ReaderSolaris
Apr 22, 2026
Nov 4, 2008
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argum...Show more
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.Show less
CVE-2008-4609
12Bsd
BsdiCisco+9 more
19Bsd
Bsd OsCatalyst Blade Switch 3020 Firmware+16 more
Apr 23, 2026
Oct 20, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue...Show more
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.Show less
CVE-2008-4013
1Oracle
1Bea Product Suite
Apr 23, 2026
Oct 14, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2008-4012
1Oracle
1Weblogic Workshop
Apr 23, 2026
Oct 14, 2008
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI pagef...Show more
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI pageflows."Show less
CVE-2008-4011
1Oracle
1Bea Product Suite
Apr 23, 2026
Oct 14, 2008
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2008-4010
1Oracle
1Bea Product Suite
Apr 23, 2026
Oct 14, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vect...Show more
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to "some NetUI tags."Show less