Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91210 | Oracle WebCenter Content 14.1.2.0.0 跨站脚本漏洞 — Oracle WebCenter Content | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87422 | Oracle Solaris 11.4 服务组件未授权数据篡改漏洞 — Oracle Solaris | 2.5 | Low | 2026-10-20 |
| CVE-2026-87423 | Oracle Solaris 11.4 X Window 系统数据篡改与部分拒绝服务漏洞 — Oracle Solaris | 4.5 | Medium | 2026-10-20 |
| CVE-2026-91208 | Oracle Solaris 11.4 服务组件拒绝服务漏洞 — Oracle Solaris | 5.1 | Medium | 2026-10-20 |
| CVE-2026-87421 | Oracle Solaris 11.4 IPS 远程代码执行漏洞 — Oracle Solaris | 7.1 | High | 2026-10-20 |
| CVE-2026-87420 | Oracle Service Bus 14.1.2.0.0远程接管漏洞 — Oracle Service Bus | 8.8 | High | 2026-10-20 |
| CVE-2026-87419 | Oracle Service Bus 12.2.1.4.0 远程接管漏洞 — Oracle Service Bus | 8.8 | High | 2026-10-20 |
| CVE-2026-87417 | Oracle Solaris 11.4 IPS 远程未授权访问漏洞 — Oracle Solaris | 7.5 | High | 2026-10-20 |
| CVE-2026-87416 | Oracle PeopleSoft 8.61-8.63 未授权数据读取漏洞 — PeopleSoft Enterprise PeopleTools | 3.7 | Low | 2026-10-20 |
| CVE-2026-87418 | Oracle PeopleSoft 8.61-8.63 未授权读取漏洞 — PeopleSoft Enterprise PeopleTools | 2.5 | Low | 2026-10-20 |
| CVE-2026-87414 | Oracle Solaris 11.4 IPS 组件数据篡改漏洞 — Oracle Solaris | 3.1 | Low | 2026-10-20 |
| CVE-2026-87415 | Oracle PeopleTools 8.61-8.63 报告分发未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 5.3 | Medium | 2026-10-20 |
| CVE-2026-87413 | Oracle Solaris 11.4 文件系统拒绝服务漏洞 — Oracle Solaris | 5.5 | Medium | 2026-10-20 |
| CVE-2026-87412 | Oracle PeopleSoft 8.61-8.63 未授权读取漏洞 — PeopleSoft Enterprise PeopleTools | 2.7 | Low | 2026-10-20 |
| CVE-2026-87411 | Oracle Solaris 11.4 文件系统拒绝服务漏洞 — Oracle Solaris | 5.5 | Medium | 2026-10-20 |
| CVE-2026-87410 | Oracle PeopleSoft 8.61-8.63 未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 6.8 | Medium | 2026-10-20 |
| CVE-2026-87408 | Oracle EBS 12.2.3-15 个人化功能跨站脚本漏洞 — Oracle Applications Framework | 8.7 | High | 2026-10-20 |
| CVE-2026-87409 | Oracle PeopleTools 8.61-8.63 nVision 远程访问漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87407 | Oracle EBS 12.2.3-15 应用框架未授权访问漏洞 — Oracle Applications Framework | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87403 | Oracle EBS 12.2.3-15 AD 工具数据篡改漏洞 — Applications DBA | 7.1 | High | 2026-10-20 |
| CVE-2026-87404 | Oracle EBS Pasta 12.2.3-15 远程接管漏洞 — Pasta | 7.5 | High | 2026-10-20 |
| CVE-2026-87402 | Oracle EBS 12.2.3-15 应用DBA提权漏洞 — Applications DBA | 7.3 | High | 2026-10-20 |
| CVE-2026-87401 | Oracle PeopleSoft 8.61-8.63 XML Publisher 未授权读取漏洞 — PeopleSoft Enterprise PeopleTools | 3.3 | Low | 2026-10-20 |
| CVE-2026-87400 | Oracle WebCenter Content 14.1.2.0.0 远程未授权访问漏洞 — Oracle WebCenter Content | 6.9 | Medium | 2026-10-20 |
| CVE-2026-87399 | Oracle WebCenter Content 14.1.2.0.0 跨站请求伪造漏洞 — Oracle WebCenter Content | 6.3 | Medium | 2026-10-20 |
| CVE-2026-87398 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-87397 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 8.8 | High | 2026-10-20 |
| CVE-2026-87395 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-87396 | Oracle Outside In 8.5.8 远程未授权数据访问漏洞 — Oracle Outside In Technology | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87394 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 8.2 | High | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.