Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8870

Browse all 8870 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-101508 Oracle Siebel CRM 17.0-26.9 EAI 远程拒绝服务漏洞 — Siebel CRM Integration 7.5 High 2026-10-20
CVE-2026-101506 Oracle Trusted Answer Search 26.1 远程数据泄露漏洞 — Oracle Trusted Answer Search 7.7 High 2026-10-20
CVE-2026-101505 Oracle Trusted Answer Search 26.1 跨站请求伪造漏洞 — Oracle Trusted Answer Search 8.7 High 2026-10-20
CVE-2026-101504 Oracle Trusted Answer Search 26.1 跨站脚本漏洞 — Oracle Trusted Answer Search 7.6 High 2026-10-20
CVE-2026-101503 Oracle Trusted Answer Search 26.1 远程代码执行漏洞 — Oracle Trusted Answer Search 9.9 Critical 2026-10-20
CVE-2026-101502 CVE-2026-101502 — Oracle Trusted Answer Search 5.0 Medium 2026-10-20
CVE-2026-101499 Oracle WebCenter Sites 12.2.1.4/14.1.2.0 远程接管漏洞 — Oracle WebCenter Sites 9.8 Critical 2026-10-20
CVE-2026-101501 Oracle Trusted Answer Search 26.1 PL/SQL远程代码执行漏洞 — Oracle Trusted Answer Search 9.9 Critical 2026-10-20
CVE-2026-101500 Oracle OPatchAuto 12.2.0.1.x 本地提权漏洞 — Oracle Global Lifecycle Management OPatchAuto 6.5 Medium 2026-10-20
CVE-2026-101495 Oracle Siebel CRM 17.0-26.9 认证绕过漏洞 — Siebel CRM Development 8.8 High 2026-10-20
CVE-2026-101498 Oracle Trusted Answer Search 26.1 远程接管漏洞 — Oracle Trusted Answer Search 8.1 High 2026-10-20
CVE-2026-101497 Oracle Identity Manager 部分版本存在 HTTP 拒绝服务漏洞 — Oracle Identity Manager 4.3 Medium 2026-10-20
CVE-2026-101494 Oracle REST Data Services 24.2.0-26.2.2 远程未授权访问漏洞 — Oracle REST Data Services 7.7 High 2026-10-20
CVE-2026-101493 Oracle REST Data Services 24.2.0-26.2.1 数据篡改漏洞 — Oracle REST Data Services 5.4 Medium 2026-10-20
CVE-2026-101491 Oracle PeopleSoft 8.61-8.63 查询组件未授权读取漏洞 — PeopleSoft Enterprise PeopleTools 5.0 Medium 2026-10-20
CVE-2026-101490 Oracle PeopleSoft 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools 6.1 Medium 2026-10-20
CVE-2026-101492 Oracle Siebel 25.12-26.9 跨站请求伪造漏洞 — Siebel CRM Integration 4.7 Medium 2026-10-20
CVE-2026-101487 Oracle PeopleSoft 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools 5.4 Medium 2026-10-20
CVE-2026-101488 Oracle PeopleTools 8.61-8.63 未授权访问与部分拒绝服务漏洞 — PeopleSoft Enterprise PeopleTools 6.5 Medium 2026-10-20
CVE-2026-101489 Oracle PeopleTools 8.61-8.63 门户未授权读取漏洞 — PeopleSoft Enterprise PeopleTools 4.3 Medium 2026-10-20
CVE-2026-101485 Oracle AHF 26.3-26.8 Trace File Analyzer 越权漏洞 — Oracle Autonomous Health Framework 6.5 Medium 2026-10-20
CVE-2026-101486 Oracle PeopleTools 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools 5.4 Medium 2026-10-20
CVE-2026-101484 Oracle Secure Backup 19.1.0 远程未授权接管漏洞 — Oracle Secure Backup 9.8 Critical 2026-10-20
CVE-2026-101483 Oracle Secure Backup 19.1.0 拒绝服务漏洞 — Oracle Secure Backup 6.5 Medium 2026-10-20
CVE-2026-101482 Oracle Secure Backup 19.1.0 远程接管漏洞 — Oracle Secure Backup 7.8 High 2026-10-20
CVE-2026-101481 Oracle Secure Backup 19.1.0 设备管理组件权限提升漏洞 — Oracle Secure Backup 8.8 High 2026-10-20
CVE-2026-101479 Oracle Secure Backup 19.1.0 远程拒绝服务漏洞 — Oracle Secure Backup 8.6 High 2026-10-20
CVE-2026-101480 Oracle Secure Backup 19.1 远程未授权读取漏洞 — Oracle Secure Backup 5.3 Medium 2026-10-20
CVE-2026-101477 Oracle AHF 26.3-26.8 Trace File Analyzer 远程接管漏洞 — Oracle Autonomous Health Framework 7.8 High 2026-10-20
CVE-2026-101476 Oracle Siebel 17.0-26.9 跨站脚本漏洞 — Siebel Apps - Marketing 4.3 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.