Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91300 Oracle JD Edwards 9.2 存在需交互的未授权数据篡改漏洞 — JD Edwards EnterpriseOne Tools 3.1 Low 2026-10-20
CVE-2026-91299 Oracle JD Edwards 9.2.0-9.2.26.5远程代码执行漏洞 — JD Edwards EnterpriseOne Orchestrator 10.0 Critical 2026-10-20
CVE-2026-91297 Oracle JD Edwards 9.2.x 跨站脚本漏洞 — JD Edwards EnterpriseOne Tools 6.1 Medium 2026-10-20
CVE-2026-91298 Oracle JD Edwards 9.2 跨站请求伪造漏洞 — JD Edwards EnterpriseOne Tools 5.4 Medium 2026-10-20
CVE-2026-91296 Oracle JD Edwards 9.2.0-9.2.26.5 远程代码执行漏洞 — JD Edwards EnterpriseOne Tools 8.8 High 2026-10-20
CVE-2026-91295 Oracle JD Edwards 9.2.0.0-9.2.26.5 远程接管漏洞 — JD Edwards EnterpriseOne Tools 8.8 High 2026-10-20
CVE-2026-91294 Oracle JD Edwards 9.2 部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 4.3 Medium 2026-10-20
CVE-2026-91292 Oracle JD Edwards 9.2 未授权读取与拒绝服务漏洞 — JD Edwards EnterpriseOne Localizations 5.4 Medium 2026-10-20
CVE-2026-91293 Oracle JD Edwards 9.2 任意数据读取及部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 5.4 Medium 2026-10-20
CVE-2026-91291 Oracle JD Edwards 9.2 业务逻辑基础设施未授权数据访问漏洞 — JD Edwards EnterpriseOne Tools 3.6 Low 2026-10-20
CVE-2026-91289 Oracle JD Edwards 9.2.0-9.2.26.5 未授权访问漏洞 — JD Edwards EnterpriseOne Tools 5.3 Medium 2026-10-20
CVE-2026-91288 Oracle JD Edwards 9.2.0-9.2.26.5 未认证数据篡改漏洞 — JD Edwards EnterpriseOne Tools 7.4 High 2026-10-20
CVE-2026-91290 Oracle JD Edwards 9.2 工具组件 Web Runtime SEC 越权漏洞 — JD Edwards EnterpriseOne Tools 5.5 Medium 2026-10-20
CVE-2026-91286 Oracle JD Edwards 9.2.x 未认证远程访问漏洞 — JD Edwards EnterpriseOne Tools 8.2 High 2026-10-20
CVE-2026-91287 Oracle JD Edwards 9.2 未认证数据篡改漏洞 — JD Edwards EnterpriseOne Tools 8.1 High 2026-10-20
CVE-2026-91285 Oracle JD Edwards 9.2.x 远程未授权访问漏洞 — JD Edwards EnterpriseOne Orchestrator 6.5 Medium 2026-10-20
CVE-2026-91283 Oracle JD Edwards 9.2.x 远程未授权数据读取漏洞 — JD Edwards EnterpriseOne Tools 4.3 Medium 2026-10-20
CVE-2026-91282 Oracle JD Edwards 9.2 未授权访问漏洞 — JD Edwards EnterpriseOne Tools 5.9 Medium 2026-10-20
CVE-2026-91284 Oracle JD Edwards 9.2 系列远程拒绝服务漏洞 — JD Edwards EnterpriseOne Tools 6.5 Medium 2026-10-20
CVE-2026-91279 Oracle JD Edwards 9.2 远程数据篡改漏洞 — JD Edwards EnterpriseOne Tools 6.1 Medium 2026-10-20
CVE-2026-91281 Oracle JD Edwards 9.2.x 存在跨站请求伪造漏洞 — JD Edwards EnterpriseOne Tools 6.1 Medium 2026-10-20
CVE-2026-91280 Oracle JD Edwards 9.2 跨站脚本漏洞 — JD Edwards EnterpriseOne Tools 6.1 Medium 2026-10-20
CVE-2026-91277 Oracle JD Edwards 9.2 未授权读取漏洞 — JD Edwards EnterpriseOne Orchestrator 5.3 Medium 2026-10-20
CVE-2026-91278 Oracle JD Edwards 9.2 监控组件未授权访问漏洞 — JD Edwards EnterpriseOne Tools 5.5 Medium 2026-10-20
CVE-2026-91275 Oracle JD Edwards 9.2 监控组件 SQL 注入漏洞 — JD Edwards EnterpriseOne Tools 6.6 Medium 2026-10-20
CVE-2026-91276 Oracle JD Edwards Orchestrator 9.2 未授权访问漏洞 — JD Edwards EnterpriseOne Orchestrator 5.3 Medium 2026-10-20
CVE-2026-91274 Oracle JD Edwards 9.2 远程数据访问漏洞 — JD Edwards EnterpriseOne Tools 6.5 Medium 2026-10-20
CVE-2026-91273 Oracle JD Edwards 9.2 远程未授权访问漏洞 — JD Edwards EnterpriseOne Tools 8.6 High 2026-10-20
CVE-2026-91272 Oracle JD Edwards 9.2.x 存在未授权访问漏洞 — JD Edwards EnterpriseOne Tools 7.4 High 2026-10-20
CVE-2026-91271 Oracle JD Edwards 9.2 远程代码执行漏洞 — JD Edwards EnterpriseOne Tools 8.1 High 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.