Oracle Corporation — Vulnerabilities & Security Advisories 7158

Browse all 7158 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Solaris Operating System Outside In Technology Oracle VM VirtualBox Oracle Coherence Java SE JDK and JRE Helidon MySQL Cluster Oracle WebCenter Content Oracle Hyperion Financial Management Oracle Commerce Guided Search / Oracle Commerce Experience Manager JD Edwards EnterpriseOne Tools Oracle Hyperion Infrastructure Technology Database - Enterprise Edition BI Publisher (formerly XML Publisher) FLEXCUBE Universal Banking Enterprise Manager Base Platform Oracle Java SE Oracle Database Oracle WebLogic Server Business Intelligence Enterprise Edition Marketing Oracle Enterprise Manager Base Platform PeopleSoft Enterprise PeopleTools Oracle Reports Developer CRM Technical Foundation

CVEs 7158

CVE ID	Title	CVSS	Severity	Published
CVE-2022-21387	Oracle Commerce 输入验证错误漏洞 — Commerce Platform	5.3	Medium	2022-01-19
CVE-2022-21386	Oracle WebLogic Server 输入验证错误漏洞 — WebLogic Server	6.1	Medium	2022-01-19
CVE-2022-21383	Oracle Communications 安全漏洞 — Enterprise Session Border Controller	4.3	Medium	2022-01-19
CVE-2022-21382	Oracle Communications 安全漏洞 — Enterprise Session Border Controller	7.7	High	2022-01-19
CVE-2022-21381	Oracle Communications 安全漏洞 — Enterprise Session Border Controller	6.4	Medium	2022-01-19
CVE-2022-21380	Oracle MySQL 输入验证错误漏洞 — MySQL Cluster	6.3	Medium	2022-01-19
CVE-2022-21379	Oracle MySQL 输入验证错误漏洞 — MySQL Server	4.9	Medium	2022-01-19
CVE-2022-21378	Oracle MySQL 输入验证错误漏洞 — MySQL Server	5.5	Medium	2022-01-19
CVE-2022-21377	Oracle Construction and Engineering Suite 输入验证错误漏洞 — Primavera Portfolio Management	5.4	Medium	2022-01-19
CVE-2022-21376	Oracle Construction and Engineering Suite 输入验证错误漏洞 — Primavera Portfolio Management	5.4	Medium	2022-01-19
CVE-2022-21375	Oracle Solaris 安全漏洞 — Solaris Operating System	5.5	Medium	2022-01-19
CVE-2022-21374	Oracle MySQL 输入验证错误漏洞 — MySQL Server	4.9	Medium	2022-01-19
CVE-2022-21373	Oracle E-Business Suite 安全漏洞 — Partner Management	6.1	Medium	2022-01-19
CVE-2022-21372	Oracle MySQL 缓冲区错误漏洞 — MySQL Server	2.7	Low	2022-01-19
CVE-2022-21371	Oracle WebLogic Server 路径遍历漏洞 — WebLogic Server	7.5	High	2022-01-19
CVE-2022-21370	Oracle MySQL 输入验证错误漏洞 — MySQL Server	4.9	Medium	2022-01-19
CVE-2022-21369	Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools	6.1	Medium	2022-01-19
CVE-2022-21368	Oracle MySQL 输入验证错误漏洞 — MySQL Server	4.7	Medium	2022-01-19
CVE-2022-21367	Oracle MySQL 输入验证错误漏洞 — MySQL Server	5.5	Medium	2022-01-19
CVE-2022-21366	Oracle Java SE和Oracle GraalVM 输入验证错误漏洞 — Java SE JDK and JRE	5.3	Medium	2022-01-19
CVE-2022-21365	Oracle Java SE和Oracle GraalVM 输入验证错误漏洞 — Java SE JDK and JRE	5.3	Medium	2022-01-19
CVE-2022-21364	Oracle PeopleSoft Enterprise PeopleTools 访问控制错误漏洞 — PeopleSoft Enterprise PT PeopleTools	5.3	Medium	2022-01-19
CVE-2022-21363	Oracle MySQL 输入验证错误漏洞 — MySQL Connectors	6.6	Medium	2022-01-19
CVE-2022-21362	Oracle MySQL 输入验证错误漏洞 — MySQL Server	4.9	Medium	2022-01-19
CVE-2022-21361	Oracle WebLogic Server 输入验证错误漏洞 — WebLogic Server	6.1	Medium	2022-01-19
CVE-2022-21360	Oracle Java SE和Oracle GraalVM 输入验证错误漏洞 — Java SE JDK and JRE	5.3	Medium	2022-01-19
CVE-2022-21359	Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools	6.1	Medium	2022-01-19
CVE-2022-21358	Oracle MySQL 输入验证错误漏洞 — MySQL Server	6.5	Medium	2022-01-19
CVE-2022-21357	Oracle MySQL 缓冲区错误漏洞 — MySQL Cluster	2.9	Low	2022-01-19
CVE-2022-21356	Oracle MySQL 输入验证错误漏洞 — MySQL Cluster	6.3	Medium	2022-01-19

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.