Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-87361 | Oracle WebCenter Content 12.2.1.4.0 数据篡改漏洞 — Oracle WebCenter Content | 4.3 | Medium | 2026-10-20 |
| CVE-2026-87363 | Oracle E-Business Suite 12.2.3-12.2.15 权限提升漏洞 — Oracle Payroll | 7.5 | High | 2026-10-20 |
| CVE-2026-87358 | Oracle GL 12.2.3-15 远程数据篡改与拒绝服务漏洞 — Oracle General Ledger | 7.1 | High | 2026-10-20 |
| CVE-2026-87359 | Oracle Service Bus 12.2.1.4.0 远程接管漏洞 — Oracle Service Bus | 8.8 | High | 2026-10-20 |
| CVE-2026-87360 | Oracle WebCenter Content 12.2.1.4/14.1.2 未授权访问漏洞 — Oracle WebCenter Content | 5.3 | Medium | 2026-10-20 |
| CVE-2026-87355 | Oracle PeopleSoft 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools | 4.4 | Medium | 2026-10-20 |
| CVE-2026-87356 | Oracle EBS 12.2.3-15 有效会话组件权限提升漏洞 — Applications Platform Engineering | 7.8 | High | 2026-10-20 |
| CVE-2026-87357 | Oracle EBS 12.2.3-15 远程接管漏洞 — Order Capture | 7.2 | High | 2026-10-20 |
| CVE-2026-87352 | Oracle PeopleSoft 8.61-8.63 LDAP 组件数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 4.4 | Medium | 2026-10-20 |
| CVE-2026-87353 | Oracle PeopleSoft 8.61-8.63 未授权数据访问漏洞 — PeopleSoft Enterprise PeopleTools | 4.5 | Medium | 2026-10-20 |
| CVE-2026-87354 | Oracle TimesTen 22.1/26.1 Kubernetes 操作符未授权读取漏洞 — Oracle TimesTen In-Memory Database | 4.3 | Medium | 2026-10-20 |
| CVE-2026-87351 | Oracle GoldenGate 远程代码执行漏洞 — Oracle GoldenGate | 8.8 | High | 2026-10-20 |
| CVE-2026-87350 | Oracle PeopleSoft 8.61-8.63 数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools | 4.5 | Medium | 2026-10-20 |
| CVE-2026-87349 | Oracle PeopleTools 8.61-8.63 权限提升漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87347 | Oracle HTTP Server 12.2/14.1 OSSL 远程代码执行漏洞 — Oracle HTTP Server | 9.6 | Critical | 2026-10-20 |
| CVE-2026-87348 | Oracle PeopleSoft 8.61-8.63 更新环境管理越权漏洞 — PeopleSoft Enterprise PeopleTools | 4.2 | Medium | 2026-10-20 |
| CVE-2026-87345 | Oracle PeopleSoft 8.61-8.63 Business Interlink 跨站请求伪造漏洞 — PeopleSoft Enterprise PeopleTools | 6.1 | Medium | 2026-10-20 |
| CVE-2026-87346 | Oracle HTTP Server 12.2.1/14.1.2 未授权数据篡改漏洞 — Oracle HTTP Server | 8.7 | High | 2026-10-20 |
| CVE-2026-87344 | Oracle PeopleTools 8.61-8.63 LDAP 远程数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87343 | Oracle PeopleTools 8.61-8.63 门户组件远程数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 4.8 | Medium | 2026-10-20 |
| CVE-2026-87342 | Oracle PeopleSoft 8.61-8.63 未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87340 | Oracle PeopleTools 8.61-8.63 Portal 数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 3.7 | Low | 2026-10-20 |
| CVE-2026-87339 | Oracle Siebel CRM 17.0-26.9 未授权读取漏洞 — Siebel CRM Integration | 3.1 | Low | 2026-10-20 |
| CVE-2026-87338 | Oracle Siebel CRM 17.0-26.9 未授权访问漏洞 — Siebel CRM Integration | 6.9 | Medium | 2026-10-20 |
| CVE-2026-87335 | Oracle EBS 12.2.3-15 DBA 组件远程未授权访问漏洞 — Applications DBA | 6.5 | Medium | 2026-10-20 |
| CVE-2026-87337 | Oracle Access Manager 12.2.1.4.0/14.1.2.1.0 远程代码执行 — Oracle Access Manager | 10.0 | Critical | 2026-10-20 |
| CVE-2026-87336 | Oracle PeopleSoft 8.61-8.63 门户组件未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 5.3 | Medium | 2026-10-20 |
| CVE-2026-87333 | Oracle JD Edwards 9.2.x 数据未授权访问漏洞 — JD Edwards EnterpriseOne Tools | 3.6 | Low | 2026-10-20 |
| CVE-2026-87332 | Oracle JD Edwards 9.2 工具组件提权与拒绝服务漏洞 — JD Edwards EnterpriseOne Tools | 3.0 | Low | 2026-10-20 |
| CVE-2026-87334 | Oracle JDeveloper 12.2.1.4.0/14.1.2.0.0 未授权访问漏洞 — Oracle JDeveloper | 5.5 | Medium | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.