Oracle
18,434 known vulnerabilities
Top Products
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Suppo
Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 23.4-23.8. Diff
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.27 a
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a
Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions that are aff
Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. Supported versions that are
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). The supported version
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451.
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payro
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that a
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Se
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions t
Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Eas
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The suppo
Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.2
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integrat
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Multiplatform Sync Error
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operati
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with
A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments o
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace
Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e
OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens thr
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an auth
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte
Vulnerability in the Oracle Smart View for Office product of Oracle Hyperion (component: Core Smart View). The support
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26,
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page a
Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration).
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (c
Frequently Asked Questions
How many CVEs affect Oracle?
Oracle has 18,434 CVE records in our database, including 1653 critical and 6617 high severity vulnerabilities. 49 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Oracle vulnerabilities?
Oracle has 1653 critical severity (CVSS 9.0+) and 6617 high severity (CVSS 7.0-8.9) vulnerabilities. 49 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Oracle vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Oracle products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Oracle Vulnerabilities
CyberStrike scans your infrastructure for Oracle vulnerabilities and provides real-time remediation guidance.
Get Started