Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-83392 Oracle EBS 12.2.3-15 应用管理器未授权读取漏洞 — Oracle Applications Manager 3.1 Low 2026-10-20
CVE-2026-83394 Oracle Demand Planning 12.1/12.2 需交互远程数据泄露漏洞 — Oracle Demand Planning 6.8 Medium 2026-10-20
CVE-2026-83393 Oracle EBS 12.2.3-15 Product Hub 远程接管漏洞 — Oracle Product Hub 8.5 High 2026-10-20
CVE-2026-83391 Oracle HRMS 12.2.3-15 跨站请求伪造漏洞 — Oracle HRMS (US) 5.4 Medium 2026-10-20
CVE-2026-83390 Oracle EBS 12.2.3-15 应用管理器诊断组件远程漏洞 — Oracle Applications Manager 4.2 Medium 2026-10-20
CVE-2026-83388 Oracle E-Business Suite 12.2 应用管理器未授权读取漏洞 — Oracle Applications Manager 2.2 Low 2026-10-20
CVE-2026-83389 Oracle HRMS (UK) 12.2.3-15 跨站脚本漏洞 — Oracle HRMS (UK) 5.4 Medium 2026-10-20
CVE-2026-83387 CVE-2026-83387 — Oracle Java SE 5.9 Medium 2026-10-20
CVE-2026-83386 Oracle HRMS 12.2.3-15 远程未授权访问漏洞 — Oracle HRMS (US) 6.5 Medium 2026-10-20
CVE-2026-83385 Oracle EBS HRMS 12.2.3-15 远程未授权访问漏洞 — Oracle HRMS (US) 6.5 Medium 2026-10-20
CVE-2026-83384 Oracle EBS 12.2.3-15 HRMS 远程未授权访问漏洞 — Oracle HRMS (US) 6.5 Medium 2026-10-20
CVE-2026-83383 Oracle HRMS 12.2.3-15 远程未授权访问漏洞 — Oracle HRMS (US) 6.5 Medium 2026-10-20
CVE-2026-83382 Oracle EBS 12.2.3-15 报告管理器未授权读取漏洞 — Oracle Report Manager 4.3 Medium 2026-10-20
CVE-2026-83381 CVE-2026-83381 — Oracle Java SE 4.8 Medium 2026-10-20
CVE-2026-83380 CVE-2026-83380 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-83379 Oracle WebLogic 12.2/14.1 插件远程未授权数据篡改漏洞 — Oracle Weblogic Server Proxy Plug-in 8.7 High 2026-10-20
CVE-2026-83377 Oracle HRMS 12.2.3-12.2.15 跨站脚本漏洞 — Oracle HRMS (US) 5.4 Medium 2026-10-20
CVE-2026-83378 Oracle Java SE 21/25/27编译器远程数据篡改漏洞 — Oracle Java SE 4.8 Medium 2026-10-20
CVE-2026-83376 CVE-2026-83376 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-83375 Oracle PeopleSoft 9.2 人力资源模块跨站脚本漏洞 — PeopleSoft Enterprise HCM Human Resources 6.0 Medium 2026-10-20
CVE-2026-83373 Oracle PeopleSoft 8.61-8.63 Portal 信息泄露漏洞 — PeopleSoft Enterprise PeopleTools 3.0 Low 2026-10-20
CVE-2026-83374 CVE-2026-83374 — Oracle Java SE 5.9 Medium 2026-10-20
CVE-2026-83372 Oracle PeopleTools 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools 5.4 Medium 2026-10-20
CVE-2026-83371 Oracle HRMS 12.2.3-15 跨站请求伪造漏洞 — Oracle HRMS (UK) 5.4 Medium 2026-10-20
CVE-2026-83367 Oracle EBS 12.2.3-15 供应链执行远程数据篡改漏洞 — Oracle Shipping Execution 7.4 High 2026-10-20
CVE-2026-83370 Oracle EBS Sourcing 12.2.3-15 远程接管漏洞 — Sourcing 7.5 High 2026-10-20
CVE-2026-83366 Oracle Shipping Execution 12.2.3-15 远程数据篡改漏洞 — Oracle Shipping Execution 7.4 High 2026-10-20
CVE-2026-83363 Oracle E-Business Suite 12.2.3-15 远程接管漏洞 — Oracle Contract Lifecycle Management for Public Sector 8.8 High 2026-10-20
CVE-2026-83361 Oracle CLM 12.2.3-15 远程未授权数据篡改漏洞 — Oracle Contract Lifecycle Management for Public Sector 8.1 High 2026-10-20
CVE-2026-83360 Oracle HRMS 12.2.3-15 远程未授权访问漏洞 — Oracle HRMS (Republic of Korea) 6.5 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.