Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91530 Oracle GoldenGate 23.4-23.26 远程未授权访问漏洞 — Oracle GoldenGate 4.4 Medium 2026-10-20
CVE-2026-91528 Oracle BI Publisher 12.2.1.4.0 低权限未授权读取漏洞 — Oracle BI Publisher 4.3 Medium 2026-10-20
CVE-2026-91527 Oracle ZFS 8.8 远程代码执行漏洞 — Oracle ZFS Storage Appliance Kit 8.8 High 2026-10-20
CVE-2026-91526 Oracle BI Publisher 多版本未授权数据访问漏洞 — Oracle BI Publisher 4.7 Medium 2026-10-20
CVE-2026-91521 Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process 8.8 High 2026-10-20
CVE-2026-91524 Oracle BI EE 12.2.1.4.0 远程部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition 4.3 Medium 2026-10-20
CVE-2026-91523 CVE-2026-91523 — Oracle Business Intelligence Enterprise Edition 5.4 Medium 2026-10-20
CVE-2026-91519 Oracle PeopleSoft 8.61-8.63 报告分发组件远程访问漏洞 — PeopleSoft Enterprise PeopleTools 6.5 Medium 2026-10-20
CVE-2026-91518 Oracle BI Publisher 多版本存在数据篡改与读取漏洞 — Oracle BI Publisher 5.4 Medium 2026-10-20
CVE-2026-91520 Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process 8.8 High 2026-10-20
CVE-2026-91515 Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process 7.5 High 2026-10-20
CVE-2026-91517 Oracle GoldenGate 13.4-13.5 远程代码执行漏洞 — Oracle Management Pack for Oracle GoldenGate 8.0 High 2026-10-20
CVE-2026-91514 Oracle BI Publisher 多版本 HTTP 未授权访问漏洞 — Oracle BI Publisher 6.5 Medium 2026-10-20
CVE-2026-91512 Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process 7.2 High 2026-10-20
CVE-2026-91506 Oracle EBS 12.2.3-15 Workflow 远程接管漏洞 — Workflow 8.1 High 2026-10-20
CVE-2026-91511 Oracle E-Business Suite 12.2.3-15 购买模块远程数据泄露漏洞 — Oracle Purchasing 7.1 High 2026-10-20
CVE-2026-91503 Oracle Database VPD 组件远程数据篡改漏洞 — Oracle Database Server 8.1 High 2026-10-20
CVE-2026-91505 Oracle PeopleTools 8.61/8.62 权限提升漏洞 — PeopleSoft Enterprise PeopleTools 6.0 Medium 2026-10-20
CVE-2026-91504 Oracle WebCenter Content 12.2.1.4/14.1.2.0 远程接管漏洞 — Oracle WebCenter Content 7.5 High 2026-10-20
CVE-2026-91499 Oracle 23.4.0-23.26.3 RDBMS 远程接管漏洞 — Oracle Database Server 8.8 High 2026-10-20
CVE-2026-91502 Oracle WebLogic 12.2.1.4 等版本存在未授权数据篡改漏洞 — Oracle WebLogic Server 7.3 High 2026-10-20
CVE-2026-91501 Oracle Identity Manager 12.2.1.4 及 14.1.2.1 安装程序越权漏洞 — Oracle Identity Manager 5.5 Medium 2026-10-20
CVE-2026-91497 Oracle PeopleSoft 8.61-8.63 未授权数据篡改漏洞 — PeopleSoft Enterprise PeopleTools 5.3 Medium 2026-10-20
CVE-2026-91496 Oracle EBS Workflow 12.2.3-15 远程接管漏洞 — Workflow 7.5 High 2026-10-20
CVE-2026-91495 Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0远程接管漏洞 — Oracle WebCenter Content 9.8 Critical 2026-10-20
CVE-2026-91494 Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0 远程代码执行 — Oracle Identity Manager Connector 7.4 High 2026-10-20
CVE-2026-91493 Oracle Identity Manager Connector 12.2/14.1 未授权访问漏洞 — Oracle Identity Manager Connector 7.5 High 2026-10-20
CVE-2026-91490 Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector 9.1 Critical 2026-10-20
CVE-2026-91491 Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0远程代码执行漏洞 — Oracle Identity Manager Connector 9.8 Critical 2026-10-20
CVE-2026-91492 Oracle Identity Manager Connector 12.2.1.4.0 及 14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector 8.7 High 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.