Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91588 Oracle BI EE 8.2.0/12.2.1 存在跨站脚本漏洞 — Oracle Business Intelligence Enterprise Edition 6.5 Medium 2026-10-20
CVE-2026-91579 Oracle BI Publisher 多版本存在可接管系统的漏洞 — Oracle BI Publisher 8.8 High 2026-10-20
CVE-2026-91577 Oracle BI EE 12.2.1.4.0 远程数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition 6.4 Medium 2026-10-20
CVE-2026-91582 Oracle BI 12.2.1.4.0 BI Search 部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition 3.7 Low 2026-10-20
CVE-2026-91576 Oracle BI EE 12.2.1.4.0 远程未授权访问漏洞 — Oracle Business Intelligence Enterprise Edition 6.5 Medium 2026-10-20
CVE-2026-91574 Oracle BI Publisher 多版本 HTTP 未授权访问漏洞 — Oracle BI Publisher 6.5 Medium 2026-10-20
CVE-2026-91573 Oracle Agile PLM 6.2.4 远程未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process 8.2 High 2026-10-20
CVE-2026-91565 Oracle Agile PLM 6.2.4 未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process 6.4 Medium 2026-10-20
CVE-2026-91568 Oracle 23.4.0-23.26.3 RDBMS 远程未授权访问漏洞 — Oracle Database Server 7.7 High 2026-10-20
CVE-2026-91563 Oracle OLAP 19/21/23 远程代码执行漏洞 — Oracle OLAP 8.8 High 2026-10-20
CVE-2026-91559 Oracle PeopleSoft 9.1 集成组件数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise FIN Manufacturing Brazil 4.4 Medium 2026-10-20
CVE-2026-91562 Oracle PeopleSoft 9.1 巴西库存组件越权与拒绝服务漏洞 — PeopleSoft Enterprise FIN Inventory Brazil 4.4 Medium 2026-10-20
CVE-2026-91554 Oracle BI Publisher 12.2.1.4.0 未授权数据篡改漏洞 — Oracle BI Publisher 6.5 Medium 2026-10-20
CVE-2026-91557 Oracle BI EE 12.2.1.4.0 低权限接管漏洞 — Oracle Business Intelligence Enterprise Edition 7.0 High 2026-10-20
CVE-2026-91555 Oracle BI Publisher 多版本存在需交互的远程数据篡改漏洞 — Oracle BI Publisher 6.1 Medium 2026-10-20
CVE-2026-91553 Oracle PeopleSoft 9.1 配置器数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise FIN Product Configurator Brazil 4.4 Medium 2026-10-20
CVE-2026-91550 Oracle Agile PPM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process 8.8 High 2026-10-20
CVE-2026-91552 Oracle WebCenter Sites 12.2.1.4/14.1.2 远程未授权访问漏洞 — Oracle WebCenter Sites 7.5 High 2026-10-20
CVE-2026-91549 Oracle BI EE 8.2.0/12.2.1.4 本地未认证接管漏洞 — Oracle Business Intelligence Enterprise Edition 7.8 High 2026-10-20
CVE-2026-91546 Oracle BI EE 12.2.1.4.0 未认证远程接管漏洞 — Oracle Business Intelligence Enterprise Edition 8.1 High 2026-10-20
CVE-2026-91547 Oracle GoldenGate 19.1-23.26 低权限未授权访问漏洞 — Oracle GoldenGate 5.5 Medium 2026-10-20
CVE-2026-91545 Oracle BI EE 8.2/12.2.1.4 本地未授权接管漏洞 — Oracle Business Intelligence Enterprise Edition 7.8 High 2026-10-20
CVE-2026-91542 Oracle WebCenter Sites 12.2.1.4.0/14.1.2.0.0 远程未授权访问漏洞 — Oracle WebCenter Sites 7.5 High 2026-10-20
CVE-2026-91539 Oracle BI EE 12.2.1.4.0 远程代码执行漏洞 — Oracle Business Intelligence Enterprise Edition 7.8 High 2026-10-20
CVE-2026-91541 Oracle PeopleSoft 9.1 远程未授权数据篡改漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil 6.5 Medium 2026-10-20
CVE-2026-91537 Oracle Solaris 11.4 Utility 组件低权限提权漏洞 — Oracle Solaris 7.8 High 2026-10-20
CVE-2026-91536 Oracle SOA Suite 12.2.1.4.0 与 14.1.2.0.0 远程数据篡改漏洞 — Oracle SOA Suite 5.0 Medium 2026-10-20
CVE-2026-91535 Oracle BI EE 多版本 BI Search 组件远程接管漏洞 — Oracle Business Intelligence Enterprise Edition 8.8 High 2026-10-20
CVE-2026-91534 Oracle BI EE 8.2/12.2/26.01 远程拒绝服务与数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition 8.6 High 2026-10-20
CVE-2026-91532 Oracle EBS 12.2.3-15 远程接管漏洞 — Oracle Applications Manager 8.8 High 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.