Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8870

Browse all 8870 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-101540 Oracle EBS Capacity 12.2.3-15 远程未授权访问漏洞 — Oracle Capacity 7.7 High 2026-10-20
CVE-2026-101539 Oracle Payroll 12.2.3-15 远程未授权访问漏洞 — Oracle Payroll 6.5 Medium 2026-10-20
CVE-2026-101541 Oracle E-Business Suite 12.2.3-12.2.15 远程未授权访问漏洞 — Oracle Capacity 7.7 High 2026-10-20
CVE-2026-101538 Oracle Order Management 12.2.3-15 远程数据泄露漏洞 — Oracle Order Management 6.5 Medium 2026-10-20
CVE-2026-101537 Oracle Solaris 11.4 远程代码执行漏洞 — Oracle Solaris 9.8 Critical 2026-10-20
CVE-2026-101536 Oracle EBS 12.2.3-15 成本维护远程接管漏洞 — Oracle Cost Management 7.5 High 2026-10-20
CVE-2026-101534 Oracle EDI Gateway 12.2.3-15 远程代码执行漏洞 — Oracle EDI Gateway 8.5 High 2026-10-20
CVE-2026-101535 Oracle E-Business Suite 12.2.3-15 远程接管漏洞 — Oracle Sales Foundation 7.5 High 2026-10-20
CVE-2026-101533 Oracle EDI Gateway 12.2.3-15 远程接管漏洞 — Oracle EDI Gateway 6.6 Medium 2026-10-20
CVE-2026-101529 Oracle Enterprise Manager 13.5/24.1 远程代码执行漏洞 — Oracle Enterprise Manager for Oracle Database 9.9 Critical 2026-10-20
CVE-2026-101531 Oracle BI EE 8.2/26.01 远程未授权数据访问漏洞 — Oracle Business Intelligence Enterprise Edition 7.5 High 2026-10-20
CVE-2026-101532 Oracle EDI Gateway 12.2.3-12.2.15 远程接管漏洞 — Oracle EDI Gateway 7.2 High 2026-10-20
CVE-2026-101526 Oracle EM for Siebel 13.5/24.1 远程接管漏洞 — Oracle Enterprise Manager for Siebel 8.8 High 2026-10-20
CVE-2026-101527 Oracle Enterprise Manager 13.5/24.1 本地提权漏洞 — Oracle Enterprise Manager Base Platform 7.8 High 2026-10-20
CVE-2026-101528 Oracle Enterprise Manager 13.5/24.1 远程代码执行漏洞 — Oracle Enterprise Manager for Oracle Database 9.9 Critical 2026-10-20
CVE-2026-101525 Oracle Enterprise Manager for Siebel 13.5/24.1 远程代码执行漏洞 — Oracle Enterprise Manager for Siebel 8.8 High 2026-10-20
CVE-2026-101522 Oracle TimesTen 22.1 本地权限提升漏洞 — Oracle TimesTen In-Memory Database 5.5 Medium 2026-10-20
CVE-2026-101524 Oracle EM 13.5/24.1 远程数据篡改与部分拒绝服务漏洞 — Oracle Enterprise Manager Base Platform 5.6 Medium 2026-10-20
CVE-2026-101520 Oracle GLM NextGen OUI 12.2-15.1 远程拒绝服务漏洞 — Oracle Global Lifecycle Management NextGen OUI Framework 7.5 High 2026-10-20
CVE-2026-101521 Oracle APEX 远程代码执行漏洞 — Oracle APEX 9.8 Critical 2026-10-20
CVE-2026-101519 Oracle EDI Gateway 12.2.3-15 远程接管漏洞 — Oracle EDI Gateway 7.2 High 2026-10-20
CVE-2026-101517 Oracle Utilities Network Management System 2.4-25 本地未授权访问漏洞 — Oracle Utilities Network Management System 5.5 Medium 2026-10-20
CVE-2026-101518 Oracle Enterprise Manager 13.5/24.1 远程接管漏洞 — Oracle Enterprise Manager Base Platform 8.8 High 2026-10-20
CVE-2026-101513 Oracle MySQL 8.0.0-37 InnoDB 物理访问拒绝服务漏洞 — MySQL Cluster 3.8 Low 2026-10-20
CVE-2026-101516 CVE-2026-101516 — Oracle Java SE 6.5 Medium 2026-10-20
CVE-2026-101515 WebLogic 12.2.1.4 等版本第三方 JAR 未授权访问漏洞 — Oracle WebLogic Server 5.9 Medium 2026-10-20
CVE-2026-101512 Oracle 23.4 数据库 HTTP 远程数据泄露漏洞 — Oracle Database Server 6.5 Medium 2026-10-20
CVE-2026-101511 Oracle Enterprise Manager 13.5/24.1 未授权读取漏洞 — Oracle Enterprise Manager Base Platform 4.3 Medium 2026-10-20
CVE-2026-101510 Oracle Database 19/21/23 的 Oracle Net Services 拒绝服务漏洞 — Oracle Net Services 4.4 Medium 2026-10-20
CVE-2026-101507 Oracle Trusted Answer Search 26.1 远程数据访问漏洞 — Oracle Trusted Answer Search 6.5 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.