Browse all 8870 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101603 | Oracle Unified Inventory Management 多版本存在远程接管漏洞 — Oracle Communications Unified Inventory Management | 7.5 | High | 2026-10-20 |
| CVE-2026-101604 | Oracle Unified Inventory Management 多版本远程未授权访问漏洞 — Oracle Communications Unified Inventory Management | 7.5 | High | 2026-10-20 |
| CVE-2026-101602 | Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.0 | High | 2026-10-20 |
| CVE-2026-101601 | Oracle GoldenGate 21.3-21.23 供应商访问模块越权漏洞 — Oracle GoldenGate | 5.5 | Medium | 2026-10-20 |
| CVE-2026-101600 | Oracle TimesTen 26.1 数据篡改与读取漏洞 — Oracle TimesTen In-Memory Database | 3.6 | Low | 2026-10-20 |
| CVE-2026-101598 | Oracle VM VirtualBox 7.2.20 核心组件远程接管漏洞 — Oracle VM VirtualBox | 7.8 | High | 2026-10-20 |
| CVE-2026-101599 | Oracle VM VirtualBox 7.2.20 核心组件远程代码执行漏洞 — Oracle VM VirtualBox | 7.5 | High | 2026-10-20 |
| CVE-2026-101595 | CVE-2026-101595 — Oracle Agile Product Lifecycle Management for Process | 5.4 | Medium | 2026-10-20 |
| CVE-2026-101596 | Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.8 | High | 2026-10-20 |
| CVE-2026-101597 | Oracle ZFS 8.8 未授权 HTTP 数据读取漏洞 — Oracle ZFS Storage Appliance Kit | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101593 | Oracle Agile 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.3 | High | 2026-10-20 |
| CVE-2026-101594 | Oracle Agile 6.2.4 产品质量管理远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.8 | High | 2026-10-20 |
| CVE-2026-101592 | CVE-2026-101592 — Oracle Agile Product Lifecycle Management for Process | 5.4 | Medium | 2026-10-20 |
| CVE-2026-101590 | Oracle Helidon 4.0.0-4.5.5 远程未授权数据篡改漏洞 — Helidon | 9.1 | Critical | 2026-10-20 |
| CVE-2026-101591 | Oracle Agile PLM 6.2.4 未授权数据读取漏洞 — Oracle Agile Product Lifecycle Management for Process | 4.3 | Medium | 2026-10-20 |
| CVE-2026-101587 | Oracle Helidon 4.0.0-4.5.5 HTTP 部分拒绝服务漏洞 — Helidon | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101588 | Oracle Helidon 4.0.0-4.5.5 WebSocket 未授权读取漏洞 — Helidon | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101589 | Oracle Utilities Network Management System 未授权读取漏洞 — Oracle Utilities Network Management System | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101585 | Oracle Helidon 3.0.0-3.2.21 跨域数据篡改漏洞 — Helidon | 7.2 | High | 2026-10-20 |
| CVE-2026-101586 | Oracle Helidon 4.0-4.5.5 及 27.0.0 未授权数据读取漏洞 — Helidon | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101584 | Oracle Helidon 4.0-4.5.5 远程信息泄露与拒绝服务漏洞 — Helidon | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101583 | Oracle Helidon 4.0.0-4.5.5/27.0.0 远程数据篡改漏洞 — Helidon | 7.0 | High | 2026-10-20 |
| CVE-2026-101582 | Oracle Helidon 4.0.0-4.5.5 未授权数据读取漏洞 — Helidon | 5.8 | Medium | 2026-10-20 |
| CVE-2026-101580 | Oracle Helidon 4.0-4.5.5 未授权数据读取漏洞 — Helidon | 5.8 | Medium | 2026-10-20 |
| CVE-2026-101581 | Oracle Helidon 4.0-4.5.5/27.0.0 DNS 数据篡改与拒绝服务漏洞 — Helidon | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101579 | Oracle Helidon 3.0.0-3.2.21 HTTP/2 未授权访问漏洞 — Helidon | 7.2 | High | 2026-10-20 |
| CVE-2026-101577 | Oracle Helidon 4.0.0-4.5.5 跨域数据篡改漏洞 — Helidon | 3.1 | Low | 2026-10-20 |
| CVE-2026-101578 | Oracle Helidon 4.0.0-4.5.5 未授权数据读取漏洞 — Helidon | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101576 | Oracle Helidon 4.0.0-4.5.5 LRA 远程信息泄露漏洞 — Helidon | 3.7 | Low | 2026-10-20 |
| CVE-2026-101575 | Oracle Helidon 4.0.0-4.5.5 LRA 组件数据篡改漏洞 — Helidon | 6.5 | Medium | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.