Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101760 | Oracle MySQL 8.4/9.7/26.7 InnoDB 拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101758 | Oracle BRM 15.x 远程未认证数据访问漏洞 — Oracle Communications Billing and Revenue Management | 8.2 | High | 2026-10-20 |
| CVE-2026-101757 | Oracle EBS 12.2.3-15 低权限攻击致系统接管漏洞 — Oracle Application Object Library | 7.8 | High | 2026-10-20 |
| CVE-2026-101759 | Oracle BRM 15.x 远程未授权访问漏洞 — Oracle Communications Billing and Revenue Management | 7.5 | High | 2026-10-20 |
| CVE-2026-101756 | MySQL 9.7/26.7 GIS 组件远程拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101755 | Oracle MySQL 26.7.0-1 客户端拒绝服务漏洞 — MySQL Server | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101753 | Oracle MySQL 9.7/26.7 远程拒绝服务漏洞 — MySQL Server | 4.4 | Medium | 2026-10-20 |
| CVE-2026-101754 | Oracle MySQL 8.4/9.7 客户端程序拒绝服务漏洞 — MySQL Server | 4.4 | Medium | 2026-10-20 |
| CVE-2026-101750 | Oracle MySQL 多版本 Clone 插件拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101751 | MySQL 8.4/9.7/26.7 组复制组件拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101752 | Oracle MySQL 9.7/26.7 远程拒绝服务漏洞 — MySQL Server | 4.4 | Medium | 2026-10-20 |
| CVE-2026-101748 | Oracle MySQL 多版本审计组件拒绝服务漏洞 — MySQL Server | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101749 | Oracle MySQL 26.7.0-1 加密组件远程拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101746 | Oracle Agile 6.2.1 安装组件未认证访问漏洞 — Oracle Agile Engineering Data Management | 7.3 | High | 2026-10-20 |
| CVE-2026-101745 | Oracle Agile 6.2.1 未授权远程数据读取漏洞 — Oracle Agile Engineering Data Management | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101747 | Oracle MySQL InnoDB 远程拒绝服务漏洞 — MySQL Server | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101742 | Oracle E-Business Suite 12.2.3-15 远程接管漏洞 — Oracle Applications Manager | 8.8 | High | 2026-10-20 |
| CVE-2026-101744 | CVE-2026-101744 — Oracle Agile Engineering Data Management | 8.4 | High | 2026-10-20 |
| CVE-2026-101743 | MySQL 26.7.0-1 GIS 组件远程拒绝服务漏洞 — MySQL Server | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101740 | Oracle Agile 6.2.1 工程通信接口未授权数据访问漏洞 — Oracle Agile Engineering Data Management | 3.6 | Low | 2026-10-20 |
| CVE-2026-101741 | Oracle Agile 6.2.1 未授权访问漏洞 — Oracle Agile Engineering Data Management | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101739 | Oracle Agile 6.2.1 数据管理组件被接管漏洞 — Oracle Agile Engineering Data Management | 7.0 | High | 2026-10-20 |
| CVE-2026-101737 | Oracle Java SE 26.0.2 编译器拒绝服务漏洞 — Oracle Java SE | 5.9 | Medium | 2026-10-20 |
| CVE-2026-101738 | Oracle Agile 6.2.1 数据管理组件存在数据篡改漏洞 — Oracle Agile Engineering Data Management | 3.1 | Low | 2026-10-20 |
| CVE-2026-101736 | Oracle Primavera Unifier 21.12 未授权数据篡改漏洞 — Primavera Unifier | 7.4 | High | 2026-10-20 |
| CVE-2026-101735 | Oracle Primavera Unifier 23.12 远程数据篡改漏洞 — Primavera Unifier | 7.1 | High | 2026-10-20 |
| CVE-2026-101733 | Oracle MySQL 8.4/9.7/26.7 JSON 组件拒绝服务漏洞 — MySQL Server | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101732 | MySQL 8.4/9.7/26.7 优化器远程拒绝服务漏洞 — MySQL Server | 4.9 | Medium | 2026-10-20 |
| CVE-2026-101734 | Oracle Agile 6.2.1 远程数据读取漏洞 — Oracle Agile Engineering Data Management | 4.3 | Medium | 2026-10-20 |
| CVE-2026-101731 | Oracle MySQL 优化器远程拒绝服务漏洞(多版本) — MySQL Server | 4.9 | Medium | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.