Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101698 | Oracle One-to-One Fulfillment 12.2.3-15 远程接管漏洞 — Oracle One-to-One Fulfillment | 7.5 | High | 2026-10-20 |
| CVE-2026-101700 | Oracle EBS 12.2.3-15 远程接管漏洞 — Oracle Application Object Library | 8.1 | High | 2026-10-20 |
| CVE-2026-101696 | Oracle E-Business Suite 12.2.3-12.2.15 跨站脚本漏洞 — Oracle Application Object Library | 6.8 | Medium | 2026-10-20 |
| CVE-2026-101697 | Oracle One-to-One Fulfillment 12.2.3-15 未授权数据篡改漏洞 — Oracle One-to-One Fulfillment | 6.1 | Medium | 2026-10-20 |
| CVE-2026-101695 | Oracle One-to-One Fulfillment 12.2.3-15 任意数据修改与拒绝服务漏洞 — Oracle One-to-One Fulfillment | 6.8 | Medium | 2026-10-20 |
| CVE-2026-101694 | Oracle MFS 12.2.3-15 远程接管漏洞 — Oracle Mobile Field Service | 7.2 | High | 2026-10-20 |
| CVE-2026-101692 | Oracle EBS 12.2.3-15 远程接管漏洞 — Oracle Mobile Field Service | 8.8 | High | 2026-10-20 |
| CVE-2026-101688 | Oracle EBS 12.2.3-15 SOA Gateway 远程未授权访问漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 8.6 | High | 2026-10-20 |
| CVE-2026-101690 | Oracle EBS 12.2.3-15 SOA Gateway 未授权访问漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 8.2 | High | 2026-10-20 |
| CVE-2026-101689 | Oracle EBS 12.2.3-15 SOA Gateway 未授权访问漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 7.7 | High | 2026-10-20 |
| CVE-2026-101686 | Oracle E-Business Suite 12.2.3-15 SOA Gateway 远程接管漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 8.8 | High | 2026-10-20 |
| CVE-2026-101685 | Oracle E-Business Suite 12.2.3-15 SOA 远程接管漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 8.8 | High | 2026-10-20 |
| CVE-2026-101687 | Oracle EBS 12.2.3-15 SOA 远程接管漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 7.5 | High | 2026-10-20 |
| CVE-2026-101682 | Oracle EBS 12.2.3-15 AD 工具未授权接管漏洞 — Applications DBA | 7.8 | High | 2026-10-20 |
| CVE-2026-101684 | Oracle EBS 12.2.3-15 SOA Gateway 任意数据访问漏洞 — Oracle E-Business Suite Integrated SOA Gateway | 8.3 | High | 2026-10-20 |
| CVE-2026-101683 | Oracle E-Business Suite 12.2.3-15 本地提权漏洞 — Applications DBA | 7.0 | High | 2026-10-20 |
| CVE-2026-101680 | Oracle BRM 15.x TLS 未认证远程数据篡改漏洞 — Oracle Communications Billing and Revenue Management | 7.4 | High | 2026-10-20 |
| CVE-2026-101681 | Oracle EBS 12.2.3-15 DBA 组件被接管漏洞 — Applications DBA | 7.0 | High | 2026-10-20 |
| CVE-2026-101679 | Oracle MySQL 多版本客户端程序拒绝服务漏洞 — MySQL Server | 7.5 | High | 2026-10-20 |
| CVE-2026-101678 | Oracle MySQL Connector/J 26.7.0 部分拒绝服务漏洞 — MySQL Connectors | 4.3 | Medium | 2026-10-20 |
| CVE-2026-101677 | Oracle MySQL Connector/J 26.7.0 未授权数据篡改漏洞 — MySQL Connectors | 4.3 | Medium | 2026-10-20 |
| CVE-2026-101674 | Oracle EBS 12.2.3-15 远程服务被接管漏洞 — Oracle Mobile Field Service | 6.7 | Medium | 2026-10-20 |
| CVE-2026-101676 | Oracle EBS 12.2.3-15 并发处理组件权限提升漏洞 — Oracle Concurrent Processing | 7.8 | High | 2026-10-20 |
| CVE-2026-101675 | Oracle Mobile Field Service 12.2.3-15 存在可被利用的漏洞 — Oracle Mobile Field Service | 6.7 | Medium | 2026-10-20 |
| CVE-2026-101673 | Oracle EBS 12.2.3-12.2.15 远程未授权访问漏洞 — Oracle US Federal Human Resources | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101672 | Oracle Call Center 12.2.3-15 RMI 远程接管漏洞 — Oracle Call Center Technology | 8.1 | High | 2026-10-20 |
| CVE-2026-101670 | Oracle E-Business Suite 12.2.3-12.2.15 远程访问漏洞 — Oracle Email Center | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101669 | Oracle EBS 12.2.3-15 人力资源越权漏洞 — Oracle Public Sector Human Resources | 6.8 | Medium | 2026-10-20 |
| CVE-2026-101671 | Oracle Email Center 12.2.3-15 跨站脚本漏洞 — Oracle Email Center | 6.1 | Medium | 2026-10-20 |
| CVE-2026-101666 | Oracle Trade Management 12.2.3-15跨站请求伪造漏洞 — Oracle Trade Management | 5.4 | Medium | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.