Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91330 Oracle JD Edwards 9.2 安装安全部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 3.3 Low 2026-10-20
CVE-2026-91328 Oracle JD Edwards 9.2 部署安全组件远程接管漏洞 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91329 Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools 6.5 Medium 2026-10-20
CVE-2026-91326 Oracle JD Edwards 9.2.0-9.2.26.4 安装安全漏洞 — JD Edwards EnterpriseOne Tools 8.8 High 2026-10-20
CVE-2026-91327 Oracle JD Edwards 9.2.x 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.5 High 2026-10-20
CVE-2026-91323 Oracle WebLogic 多版本核心组件远程代码执行漏洞 — Oracle WebLogic Server 9.8 Critical 2026-10-20
CVE-2026-91325 Oracle JD Edwards 9.2 安装安全未授权访问漏洞 — JD Edwards EnterpriseOne Tools 7.5 High 2026-10-20
CVE-2026-91324 Oracle Solaris 11.4 库组件拒绝服务漏洞 — Oracle Solaris 4.7 Medium 2026-10-20
CVE-2026-91320 Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 本地权限提升漏洞 — Oracle JDeveloper 5.7 Medium 2026-10-20
CVE-2026-91321 Oracle EBS iProcurement 12.2.3-15 远程接管漏洞 — iProcurement 7.5 High 2026-10-20
CVE-2026-91322 Oracle JDeveloper 12.2.1.4 与 14.1.2.0 未授权数据读取漏洞 — Oracle JDeveloper 3.3 Low 2026-10-20
CVE-2026-91318 Oracle JDeveloper 12.2.1.4.0 及 14.1.2.0.0 远程未授权访问漏洞 — Oracle JDeveloper 6.5 Medium 2026-10-20
CVE-2026-91317 Oracle JDeveloper 12.2.1.4 与 14.1.2.0 SOAP 漏洞 — Oracle JDeveloper 5.9 Medium 2026-10-20
CVE-2026-91319 Oracle JDeveloper 12.2.1.4 与 14.1.2.0 任意数据修改漏洞 — Oracle JDeveloper 5.9 Medium 2026-10-20
CVE-2026-91315 Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91314 Oracle JD Edwards 9.2.x 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91316 Oracle EBS iProcurement 12.2.3-15 远程接管漏洞 — iProcurement 7.2 High 2026-10-20
CVE-2026-91312 Oracle JD Edwards 9.2.0-9.2.26.5 安装安全漏洞 — JD Edwards EnterpriseOne Tools 6.5 Medium 2026-10-20
CVE-2026-91313 Oracle JD Edwards 9.2.0-9.2.26.4 远程接管漏洞 — JD Edwards EnterpriseOne Tools 8.1 High 2026-10-20
CVE-2026-91311 Oracle JD Edwards 9.2 安装安全漏洞可致系统被接管 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91310 Oracle JD Edwards 9.2 安装组件远程接管漏洞 — JD Edwards EnterpriseOne Tools 8.8 High 2026-10-20
CVE-2026-91308 Oracle JD Edwards 9.2 安装安全未授权访问漏洞 — JD Edwards EnterpriseOne Tools 7.5 High 2026-10-20
CVE-2026-91309 Oracle JD Edwards 9.2 系列 Interoperability 组件未授权访问漏洞 — JD Edwards EnterpriseOne Tools 5.9 Medium 2026-10-20
CVE-2026-91307 Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.5 High 2026-10-20
CVE-2026-91305 Oracle JD Edwards 9.2 安装安全远程代码执行漏洞 — JD Edwards EnterpriseOne Tools 9.1 Critical 2026-10-20
CVE-2026-91306 Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91303 Oracle JD Edwards 9.2 安装安全远程接管漏洞 — JD Edwards EnterpriseOne Tools 8.8 High 2026-10-20
CVE-2026-91302 Oracle JD Edwards 9.2.x 部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 3.3 Low 2026-10-20
CVE-2026-91304 Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools 7.8 High 2026-10-20
CVE-2026-91301 Oracle JD Edwards 9.2 低权限数据篡改与拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 3.6 Low 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.