Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91636 Oracle Essbase 21.8.3.0.0 远程未授权访问漏洞 — Oracle Essbase 7.7 High 2026-10-20
CVE-2026-91635 Oracle Essbase 21.8.3.0.0 T3/IIOP 远程接管漏洞 — Oracle Essbase 8.1 High 2026-10-20
CVE-2026-91637 Oracle Essbase 21.8.3.0.0 远程接管漏洞 — Oracle Essbase 9.9 Critical 2026-10-20
CVE-2026-91634 Oracle Essbase 21.8.3.0.0 远程未授权数据读取漏洞 — Oracle Essbase 5.3 Medium 2026-10-20
CVE-2026-91633 Oracle Essbase 21.8.3.0.0 安全组件未授权访问漏洞 — Oracle Essbase 6.0 Medium 2026-10-20
CVE-2026-91632 Oracle Essbase 21.8.3.0.0 远程未授权访问漏洞 — Oracle Essbase 7.7 High 2026-10-20
CVE-2026-91629 Oracle 计费 15.x 平台低权限数据访问漏洞 — Oracle Communications Billing and Revenue Management 4.7 Medium 2026-10-20
CVE-2026-91630 Oracle Essbase 21.8.3.0.0 安全组件远程未授权访问漏洞 — Oracle Essbase 6.8 Medium 2026-10-20
CVE-2026-91631 Oracle Essbase 21.8.3.0.0 远程未授权数据读取漏洞 — Oracle Essbase 5.0 Medium 2026-10-20
CVE-2026-91627 Oracle 计费产品 15.x 版本本地权限提升漏洞 — Oracle Communications Billing and Revenue Management 7.8 High 2026-10-20
CVE-2026-91628 Oracle BRM 15.0-15.2 远程低权限未授权数据访问漏洞 — Oracle Communications Billing and Revenue Management 5.5 Medium 2026-10-20
CVE-2026-91625 Oracle Agile PLM 6.2.4 未认证远程访问漏洞 — Oracle Agile Product Lifecycle Management for Process 8.2 High 2026-10-20
CVE-2026-91624 Oracle Agile PLM 6.2.4 远程未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process 9.1 Critical 2026-10-20
CVE-2026-91622 CVE-2026-91622 — Oracle Agile Product Lifecycle Management for Process 9.3 Critical 2026-10-20
CVE-2026-91617 Oracle Fusion Middleware 12.2/14.1/15.1 远程诊断代理未授权访问漏洞 — Oracle Middleware Common Libraries and Tools 5.5 Medium 2026-10-20
CVE-2026-91623 Oracle Agile PLM 6.2.4 远程数据篡改漏洞 — Oracle Agile Product Lifecycle Management for Process 7.4 High 2026-10-20
CVE-2026-91614 Oracle Unified Inventory Management 多版本未授权读取漏洞 — Oracle Communications Unified Inventory Management 3.3 Low 2026-10-20
CVE-2026-91616 Oracle Fusion Middleware 12.2.1.4.0/14.1.1.0.0 未授权读取漏洞 — Oracle Middleware Common Libraries and Tools 3.7 Low 2026-10-20
CVE-2026-91615 Oracle DB 19/21/23 Java VM 权限提升漏洞 — Oracle Database Server 6.3 Medium 2026-10-20
CVE-2026-91613 Oracle UIM 7.5-8.0 存在低权限未授权数据读取漏洞 — Oracle Communications Unified Inventory Management 3.3 Low 2026-10-20
CVE-2026-91612 Oracle Unified Inventory Management 7.5-8.0 信息泄露漏洞 — Oracle Communications Unified Inventory Management 3.3 Low 2026-10-20
CVE-2026-91610 Oracle REST Data Services 24.2.0-26.2.2 远程接管漏洞 — Oracle REST Data Services 8.8 High 2026-10-20
CVE-2026-91609 Oracle REST Data Services 24.2.0-26.2.1 未授权访问漏洞 — Oracle REST Data Services 6.5 Medium 2026-10-20
CVE-2026-91607 Oracle BI EE 8.2/26.01 存在 HTTP 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition 4.3 Medium 2026-10-20
CVE-2026-91608 Oracle BI Publisher 多版本远程未授权访问漏洞 — Oracle BI Publisher 7.5 High 2026-10-20
CVE-2026-91598 Oracle BI EE 8.2.0/26.01 远程数据读取漏洞 — Oracle Business Intelligence Enterprise Edition 4.3 Medium 2026-10-20
CVE-2026-91604 Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process 7.5 High 2026-10-20
CVE-2026-91600 Oracle BI EE 26.01.0.0.0 Visual Analyzer 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition 4.3 Medium 2026-10-20
CVE-2026-91590 Oracle BI Publisher 8.2.0/26.01 存在跨站脚本漏洞 — Oracle BI Publisher 5.4 Medium 2026-10-20
CVE-2026-91597 Oracle BI EE 8.2/26.01 平台安全漏洞 — Oracle Business Intelligence Enterprise Edition 8.3 High 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.