Browse all 8870 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-101478 | Oracle AHF 26.3-26.8 Trace File Analyzer 本地提权漏洞 — Oracle Autonomous Health Framework | 7.8 | High | 2026-10-20 |
| CVE-2026-101473 | Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.1 | High | 2026-10-20 |
| CVE-2026-101474 | Oracle Agile PLM 6.2.4 远程访问漏洞 — Oracle Agile Product Lifecycle Management for Process | 5.9 | Medium | 2026-10-20 |
| CVE-2026-101475 | Oracle Primavera Unifier 21.12 至 25.12 远程未授权访问漏洞 — Primavera Unifier | 6.5 | Medium | 2026-10-20 |
| CVE-2026-101472 | Oracle Product Lifecycle Analytics 3.6.1 安装问题漏洞 — Oracle Product Lifecycle Analytics | 5.5 | Medium | 2026-10-20 |
| CVE-2026-101471 | Oracle Product Lifecycle Analytics 3.6.1 安装配置漏洞 — Oracle Product Lifecycle Analytics | 6.1 | Medium | 2026-10-20 |
| CVE-2026-101469 | Oracle Product Lifecycle Analytics 3.6.1 安装问题导致远程接管漏洞 — Oracle Product Lifecycle Analytics | 7.5 | High | 2026-10-20 |
| CVE-2026-101468 | Oracle Siebel CRM 17.0-26.9 未授权访问漏洞 — Siebel CRM Deployment | 7.5 | High | 2026-10-20 |
| CVE-2026-101470 | Oracle Product Lifecycle Analytics 3.6.1 安装配置漏洞 — Oracle Product Lifecycle Analytics | 6.0 | Medium | 2026-10-20 |
| CVE-2026-101466 | Oracle EDI Gateway 12.2.3-15 远程代码执行漏洞 — Oracle EDI Gateway | 7.2 | High | 2026-10-20 |
| CVE-2026-101467 | Oracle Siebel CRM 17.0-26.9 未授权数据篡改漏洞 — Siebel CRM End User | 7.4 | High | 2026-10-20 |
| CVE-2026-101465 | Oracle Siebel CRM 17.0-26.9 低权限数据篡改漏洞 — Siebel CRM Deployment | 6.3 | Medium | 2026-10-20 |
| CVE-2026-101463 | Oracle Siebel CRM 17.0-26.9 未授权访问漏洞 — Siebel CRM End User | 7.5 | High | 2026-10-20 |
| CVE-2026-101464 | Oracle Siebel CRM 17.0-26.9 部署组件权限提升漏洞 — Siebel CRM Deployment | 7.1 | High | 2026-10-20 |
| CVE-2026-101460 | Oracle Siebel CRM 17.0-26.9 远程未授权数据访问漏洞 — Siebel CRM Deployment | 7.5 | High | 2026-10-20 |
| CVE-2026-101461 | Oracle Siebel CRM 17.0-26.9 远程未授权访问漏洞 — Siebel CRM Deployment | 7.5 | High | 2026-10-20 |
| CVE-2026-101462 | Oracle Siebel CRM 17.0-26.9 未授权数据访问漏洞 — Siebel CRM Deployment | 5.5 | Medium | 2026-10-20 |
| CVE-2026-101459 | Oracle Siebel CRM 17.0-26.9 远程代码执行漏洞 — Siebel CRM Deployment | 8.3 | High | 2026-10-20 |
| CVE-2026-101457 | Oracle Siebel 17.0-26.9 SQL 注入漏洞 — Siebel Apps - Life Sciences | 8.8 | High | 2026-10-20 |
| CVE-2026-101458 | Oracle Siebel CRM 17.0-26.9 远程未授权访问漏洞 — Siebel CRM Deployment | 8.2 | High | 2026-10-20 |
| CVE-2026-101455 | Oracle Siebel CRM 17.0-26.9 数据篡改漏洞 — Siebel CRM Development | 6.3 | Medium | 2026-10-20 |
| CVE-2026-101456 | Oracle Siebel CRM 17.0-26.9 配置工具越权漏洞 — Siebel CRM Development | 6.0 | Medium | 2026-10-20 |
| CVE-2026-101452 | Oracle AHF 26.3-26.8 远程接管漏洞 — Oracle Autonomous Health Framework | 7.8 | High | 2026-10-20 |
| CVE-2026-101453 | Oracle Siebel CRM 17.0-26.9 服务器基础设施漏洞 — Siebel CRM Deployment | 6.7 | Medium | 2026-10-20 |
| CVE-2026-101454 | Oracle Siebel CRM 17.0-26.9 配置工具越权漏洞 — Siebel CRM Development | 6.1 | Medium | 2026-10-20 |
| CVE-2026-101451 | Oracle Siebel 17.0-26.9 Web UI 跨站脚本漏洞 — Siebel Life Sciences | 8.7 | High | 2026-10-20 |
| CVE-2026-101450 | Oracle PeopleTools 8.61-8.63 跨站脚本漏洞 — PeopleSoft Enterprise PeopleTools | 7.1 | High | 2026-10-20 |
| CVE-2026-101449 | Oracle Siebel CRM 17.0-26.9 物理访问导致数据泄露 — Siebel CRM Deployment | 2.4 | Low | 2026-10-20 |
| CVE-2026-101448 | Oracle Siebel CRM 17.0-26.9 未授权信息泄露漏洞 — Siebel CRM Deployment | 5.3 | Medium | 2026-10-20 |
| CVE-2026-101447 | Oracle Siebel CRM 25.12-26.9 工作流远程接管漏洞 — Siebel CRM Development | 7.1 | High | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.