Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-87301 Oracle VM VirtualBox 7.2.16 核心组件远程代码执行漏洞 — Oracle VM VirtualBox 8.4 High 2026-10-20
CVE-2026-87299 Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0 未授权访问漏洞 — Oracle WebCenter Content 6.1 Medium 2026-10-20
CVE-2026-87300 Oracle WebLogic 12.2/14.1 代理插件远程未授权漏洞 — Oracle Weblogic Server Proxy Plug-in 8.7 High 2026-10-20
CVE-2026-87298 Oracle WebCenter Content 12.2.1.4 未授权访问漏洞 — Oracle WebCenter Content 6.5 Medium 2026-10-20
CVE-2026-87296 Oracle Access Manager 12.2.1.4.0 未授权访问漏洞 — Oracle Access Manager 7.5 High 2026-10-20
CVE-2026-87297 Oracle BRM 15.0/15.1/15.2 远程代码执行漏洞 — Oracle Communications Billing and Revenue Management 6.7 Medium 2026-10-20
CVE-2026-87295 Oracle HRMS 12.2.3-12.2.15 权限提升漏洞 — Oracle HRMS (India) 6.5 Medium 2026-10-20
CVE-2026-87293 Oracle Java SE 8u503 RMI 组件数据访问漏洞 — Oracle Java SE 5.4 Medium 2026-10-20
CVE-2026-87294 CVE-2026-87294 — Oracle Java SE 6.5 Medium 2026-10-20
CVE-2026-87291 Oracle Java SE 21/25/27 网络组件未授权数据读取漏洞 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-87292 CVE-2026-87292 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-87263 Oracle BI EE 8.2.0/26.01.0远程接管漏洞 — Oracle Business Intelligence Enterprise Edition 8.8 High 2026-10-20
CVE-2026-87255 Oracle Java SE 25.0.4.1/27编译器远程数据读取漏洞 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-87290 CVE-2026-87290 — Oracle Java SE 5.9 Medium 2026-10-20
CVE-2026-87251 Oracle Access Manager 12.2.1.4.0/14.1.2.1.0 SAML 远程接管漏洞 — Oracle Access Manager 9.8 Critical 2026-10-20
CVE-2026-83426 Oracle Access Manager 12.2.1.4.0 与 14.1.2.1.0 未授权数据篡改漏洞 — Oracle Access Manager 8.7 High 2026-10-20
CVE-2026-83427 Oracle PeopleTools 8.61-8.63 远程代码执行漏洞 — PeopleSoft Enterprise PeopleTools 6.6 Medium 2026-10-20
CVE-2026-83409 Oracle Access Manager 12.2.1.4/14.1.2 SAML 未认证接管漏洞 — Oracle Access Manager 8.1 High 2026-10-20
CVE-2026-83407 Oracle Access Manager 12.2.1.4.0 和 14.1.2.0.0 远程未授权访问漏洞 — Oracle Access Manager 8.6 High 2026-10-20
CVE-2026-83406 Oracle BRM 15.x 平台组件高权限攻击者可接管漏洞 — Oracle Communications Billing and Revenue Management 6.7 Medium 2026-10-20
CVE-2026-83404 Oracle MySQL 26.7.0 Connector/Python 未授权访问漏洞 — MySQL Connectors 7.5 High 2026-10-20
CVE-2026-83403 Oracle OIM 12.2.1.4.0/14.1.2.1.0 远程接管漏洞 — Oracle Identity Manager 8.8 High 2026-10-20
CVE-2026-83400 CVE-2026-83400 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-83401 Oracle OIM 12.2/14.1 跨站脚本漏洞 — Oracle Identity Manager 6.1 Medium 2026-10-20
CVE-2026-83402 Oracle OIM 12.2.1.4.0/14.1.2.1.0 远程接管漏洞 — Oracle Identity Manager 8.8 High 2026-10-20
CVE-2026-83399 Oracle WebLogic 12.2.1.4 远程代码执行漏洞 — Oracle WebLogic Server 9.8 Critical 2026-10-20
CVE-2026-83398 Oracle Data Integrator 12.2.1.4.0 未授权访问漏洞 — Oracle Data Integrator 8.2 High 2026-10-20
CVE-2026-83396 Oracle Data Integrator 12.2.1/14.1.2 RMI 远程代码执行漏洞 — Oracle Data Integrator 9.8 Critical 2026-10-20
CVE-2026-83395 CVE-2026-83395 — Oracle Java SE 6.5 Medium 2026-10-20
CVE-2026-83397 Oracle Data Integrator 12.2.1.4.0 未认证远程接管漏洞 — Oracle Data Integrator 9.8 Critical 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.