Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-83359 | Oracle HRMS 12.2.3-15 印度薪酬远程数据泄露漏洞 — Oracle HRMS (India) | 6.5 | Medium | 2026-10-20 |
| CVE-2026-83358 | Oracle HRMS 12.2.3-15 远程未授权访问漏洞 — Oracle HRMS (Norway) | 6.5 | Medium | 2026-10-20 |
| CVE-2026-83139 | Oracle EBS 12.2 订单管理远程未授权访问漏洞 — Oracle Order Management | 6.5 | Medium | 2026-10-20 |
| CVE-2026-73964 | Oracle 19.3-21.23 RDBMS 查询优化器未授权读取漏洞 — Oracle Database Server | 2.7 | Low | 2026-10-20 |
| CVE-2026-70860 | Oracle PeopleSoft 9.1 eProcurement 远程数据篡改漏洞 — PeopleSoft Enterprise FIN Common Objects Argentina | 5.9 | Medium | 2026-10-20 |
| CVE-2026-70869 | Oracle PeopleTools 8.61-8.63 Integration Broker 越权漏洞 — PeopleSoft Enterprise PeopleTools | 4.7 | Medium | 2026-10-20 |
| CVE-2026-60968 | Oracle PeopleTools 8.61-8.63 数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools | 6.0 | Medium | 2026-10-20 |
| CVE-2026-60887 | Oracle PeopleTools 8.61-8.63 数据移动器漏洞 — PeopleSoft Enterprise PeopleTools | 3.8 | Low | 2026-10-20 |
| CVE-2026-60964 | Oracle PeopleSoft 8.61/8.62 Open Query 未授权读取 — PeopleSoft Enterprise PeopleTools | 1.9 | Low | 2026-10-20 |
| CVE-2026-60882 | Oracle PeopleSoft 8.61/8.62 Search Framework 未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 5.3 | Medium | 2026-10-20 |
| CVE-2026-60885 | Oracle PeopleTools 8.61/8.62 推送通知组件漏洞 — PeopleSoft Enterprise PeopleTools | 6.8 | Medium | 2026-10-20 |
| CVE-2026-60881 | Oracle PeopleTools 8.61-8.63 元数据远程 DoS 漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-60878 | Oracle PeopleTools 8.61/8.62 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools | 4.4 | Medium | 2026-10-20 |
| CVE-2026-60876 | Oracle PeopleTools 8.62 搜索框架跨站请求伪造漏洞 — PeopleSoft Enterprise PeopleTools | 4.2 | Medium | 2026-10-20 |
| CVE-2026-60874 | Oracle PeopleSoft 8.61/8.62 Portal 信息泄露与拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools | 4.2 | Medium | 2026-10-20 |
| CVE-2026-60839 | Oracle PeopleTools 8.61/8.62 Query 组件拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools | 5.5 | Medium | 2026-10-20 |
| CVE-2026-60869 | Oracle PeopleTools 8.61-8.63 数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools | 6.8 | Medium | 2026-10-20 |
| CVE-2026-60819 | Oracle PeopleSoft 8.61-8.63 SSH 未授权数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 3.7 | Low | 2026-10-20 |
| CVE-2026-60814 | Oracle PeopleTools 8.61-8.63 Business Interlink 数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 3.9 | Low | 2026-10-20 |
| CVE-2026-60745 | Oracle PeopleTools 8.61-8.63 JRE 未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 4.4 | Medium | 2026-10-20 |
| CVE-2026-60746 | Oracle Order Management 12.2.3-15 远程未授权访问漏洞 — Oracle Order Management | 5.9 | Medium | 2026-10-20 |
| CVE-2026-60809 | Oracle PeopleTools 8.61-8.63 Weblogic 数据读写漏洞 — PeopleSoft Enterprise PeopleTools | 4.2 | Medium | 2026-10-20 |
| CVE-2026-60662 | Oracle Solaris 11.4 服务组件本地权限提升漏洞 — Oracle Solaris | 7.8 | High | 2026-10-20 |
| CVE-2026-60743 | Oracle PeopleTools 8.61-8.63 WebLogic 远程未授权访问漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-60500 | Oracle PeopleTools 8.61-8.63 未授权远程读取漏洞 — PeopleSoft Enterprise PeopleTools | 5.8 | Medium | 2026-10-20 |
| CVE-2026-60453 | Oracle Solaris 11.4 X 窗口系统权限提升漏洞 — Oracle Solaris | 5.3 | Medium | 2026-10-20 |
| CVE-2026-60432 | Oracle Solaris 11.3/11.4 Image Packaging System 远程代码执行漏洞 — Oracle Solaris | 9.8 | Critical | 2026-10-20 |
| CVE-2026-101856 | Oracle E-Business Suite 12.2.3-15 远程未授权访问漏洞 — Oracle Order Management | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101857 | Oracle EBS 12.2.3-12.2.15 Order Management 远程访问漏洞 — Oracle Order Management | 6.5 | Medium | 2026-10-20 |
| CVE-2026-47025 | Oracle Solaris 11.3/11.4 远程代码执行漏洞 — Oracle Solaris | 8.8 | High | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.