Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-87391 Oracle WebCenter Content 12.2/14.1 未授权访问漏洞 — WebCenter Content: Imaging 5.5 Medium 2026-10-20
CVE-2026-87393 Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology 6.5 Medium 2026-10-20
CVE-2026-87392 Oracle WebCenter Imaging 14.1.2.0.0 远程数据篡改漏洞 — WebCenter Content: Imaging 6.5 Medium 2026-10-20
CVE-2026-87390 Oracle WebCenter Content 12.2.1.4 跨站请求伪造漏洞 — Oracle WebCenter Content 5.4 Medium 2026-10-20
CVE-2026-87389 Oracle JD Edwards 9.2 人力资源模块数据篡改漏洞 — JD Edwards EnterpriseOne Human Resources Management 3.7 Low 2026-10-20
CVE-2026-87388 Oracle JD Edwards 9.2 配置器数据篡改漏洞 — JD Edwards EnterpriseOne Configurator 5.3 Medium 2026-10-20
CVE-2026-87386 Oracle JD Edwards 9.2 存在拒绝服务漏洞 — JD Edwards EnterpriseOne General Ledger 5.3 Medium 2026-10-20
CVE-2026-87385 Oracle JD Edwards 9.2 人力资源模块未授权数据篡改漏洞 — JD Edwards EnterpriseOne Human Resources Management 4.8 Medium 2026-10-20
CVE-2026-87387 Oracle JD Edwards 9.2 Homebuilder 数据篡改漏洞 — JD Edwards EnterpriseOne Homebuilder 6.5 Medium 2026-10-20
CVE-2026-87383 Oracle JD Edwards 9.2 工具包构建组件高权限接管漏洞 — JD Edwards EnterpriseOne Tools 6.7 Medium 2026-10-20
CVE-2026-87384 Oracle JD Edwards 9.2 人力资源数据篡改与拒绝服务漏洞 — JD Edwards EnterpriseOne Human Resources Management 5.4 Medium 2026-10-20
CVE-2026-87382 Oracle JD Edwards 9.2 操作采购 SMTP 远程未授权访问 — JD Edwards EnterpriseOne Operational Sourcing 6.5 Medium 2026-10-20
CVE-2026-87381 Oracle JD Edwards 9.2 远程数据篡改漏洞 — JD Edwards EnterpriseOne Tools 5.4 Medium 2026-10-20
CVE-2026-87380 Oracle JD Edwards 9.2 销售订单录入未授权访问漏洞 — JD Edwards EnterpriseOne Sales Order Entry 6.5 Medium 2026-10-20
CVE-2026-87379 Oracle WebCenter Imaging 12.2.1.4.0/14.1.2.0.0 SOAP 未授权读取漏洞 — WebCenter Content: Imaging 4.3 Medium 2026-10-20
CVE-2026-87377 Oracle WebCenter Content 14.1.2 远程数据篡改漏洞 — WebCenter Content: Imaging 6.8 Medium 2026-10-20
CVE-2026-87378 Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 未授权访问漏洞 — WebCenter Content: Imaging 6.5 Medium 2026-10-20
CVE-2026-87376 Oracle WebCenter Content 14.1.2.0.0 远程数据篡改漏洞 — WebCenter Content: Imaging 6.8 Medium 2026-10-20
CVE-2026-87374 Oracle WebCenter Content 12.2.1.4.0 与 14.1.2.0.0 越权漏洞 — Oracle WebCenter Content 6.8 Medium 2026-10-20
CVE-2026-87375 Oracle WebCenter Content Imaging 12.2.1.4/14.1.2.0 越权漏洞 — WebCenter Content: Imaging 6.5 Medium 2026-10-20
CVE-2026-87373 Oracle WebCenter Content 12.2/14.1 未认证数据访问漏洞 — Oracle WebCenter Content 6.5 Medium 2026-10-20
CVE-2026-87372 Oracle WebCenter Content 12.2.1.4 及 14.1.2 数据泄露漏洞 — Oracle WebCenter Content 6.5 Medium 2026-10-20
CVE-2026-87371 Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 远程数据篡改漏洞 — Oracle WebCenter Content 6.8 Medium 2026-10-20
CVE-2026-87369 Oracle Service Bus 12.2.1.4.0/14.1.2.0.0 拒绝服务漏洞 — Oracle Service Bus 7.5 High 2026-10-20
CVE-2026-87367 CVE-2026-87367 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-87370 Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 跨站脚本漏洞 — Oracle WebCenter Content 6.5 Medium 2026-10-20
CVE-2026-87366 Oracle EBS 12.2.3-15 应用框架 HTTP 未授权访问漏洞 — Oracle Applications Framework 4.9 Medium 2026-10-20
CVE-2026-87364 Oracle Service Bus 12.2.1.4.0 远程接管漏洞 — Oracle Service Bus 8.8 High 2026-10-20
CVE-2026-87365 Oracle WebCenter Content 12.2.1.4/14.1.2 拒绝服务漏洞 — Oracle WebCenter Content 6.5 Medium 2026-10-20
CVE-2026-87362 Oracle Agile PLM 9.3.6 远程未授权数据访问漏洞 — Oracle Agile PLM 6.5 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.