Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91487 Oracle Java SE 多版本编译器数据篡改漏洞 — Oracle Java SE 4.8 Medium 2026-10-20
CVE-2026-91489 Oracle Identity Manager 12.2.1.4.0/14.1.2.1.0 本地提权漏洞 — Oracle Identity Manager Connector 7.1 High 2026-10-20
CVE-2026-91488 Oracle OIM Connector 12.2.1.4.0/14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector 7.1 High 2026-10-20
CVE-2026-91484 CVE-2026-91484 — Oracle Java SE 7.5 High 2026-10-20
CVE-2026-91485 Oracle PeopleSoft 9.2 现金管理越权与拒绝服务漏洞 — PeopleSoft Enterprise FIN Cash Management 3.8 Low 2026-10-20
CVE-2026-91486 Oracle PeopleSoft 9.1 巴西总账越权访问与拒绝服务漏洞 — PeopleSoft Enterprise FIN General Ledger Brazil 4.4 Medium 2026-10-20
CVE-2026-91481 Oracle PeopleSoft 9.2 采购组件存在跨站脚本漏洞 — PeopleSoft Enterprise SCM Purchasing 5.4 Medium 2026-10-20
CVE-2026-91482 Oracle PeopleSoft 9.2 战略采购组件未授权访问漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing 6.5 Medium 2026-10-20
CVE-2026-91483 Oracle Outside In 8.5.8 未授权远程代码执行漏洞 — Oracle Outside In Technology 7.8 High 2026-10-20
CVE-2026-91479 Oracle 23.4.0-23.26.3 RDBMS 拒绝服务漏洞 — Oracle Database Server 6.5 Medium 2026-10-20
CVE-2026-91480 Oracle PeopleSoft 9.2 战略采购远程未授权访问漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing 6.5 Medium 2026-10-20
CVE-2026-91476 Oracle PeopleSoft 9.1 未授权数据读取漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil 5.3 Medium 2026-10-20
CVE-2026-91477 CVE-2026-91477 — Oracle JavaFX 3.1 Low 2026-10-20
CVE-2026-91478 Oracle PeopleSoft 9.2 战略采购远程接管漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing 8.8 High 2026-10-20
CVE-2026-91474 Oracle PeopleSoft 9.1 数据篡改漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil 6.1 Medium 2026-10-20
CVE-2026-91473 Oracle HTTP Server 12.2.1.4.0 远程代码执行漏洞 — Oracle HTTP Server 7.8 High 2026-10-20
CVE-2026-91475 Oracle Outside In 8.5.8 数据篡改与拒绝服务漏洞 — Oracle Outside In Technology 6.6 Medium 2026-10-20
CVE-2026-91467 Oracle Fusion Middleware Control 12.2.1.4.0/14.1.2.0.0 物理访问漏洞 — Oracle Fusion Middleware Control 6.6 Medium 2026-10-20
CVE-2026-91468 Oracle PeopleTools 8.61-8.63 QAS 组件未授权数据篡改漏洞 — PeopleSoft Enterprise PeopleTools 6.5 Medium 2026-10-20
CVE-2026-91471 Oracle PeopleSoft 9.2 无认证数据篡改漏洞 — PeopleSoft Enterprise CC Common Application Objects 3.7 Low 2026-10-20
CVE-2026-91464 CVE-2026-91464 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-91466 CVE-2026-91466 — PeopleSoft Enterprise FIN Common Objects Argentina 6.4 Medium 2026-10-20
CVE-2026-91465 Oracle PeopleSoft 9.1 远程未授权访问漏洞 — PeopleSoft Enterprise FIN Common Objects Argentina 7.5 High 2026-10-20
CVE-2026-91463 CVE-2026-91463 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-91462 CVE-2026-91462 — Oracle Java SE 5.9 Medium 2026-10-20
CVE-2026-91461 CVE-2026-91461 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-91459 Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology 7.8 High 2026-10-20
CVE-2026-91458 Oracle Outside In 8.5.8 本地权限提升漏洞 — Oracle Outside In Technology 7.8 High 2026-10-20
CVE-2026-91460 Oracle Outside In 8.5.8 本地权限提升漏洞 — Oracle Outside In Technology 7.8 High 2026-10-20
CVE-2026-91455 Oracle JD Edwards 9.2.0-9.2.26.5 跨站脚本漏洞 — JD Edwards EnterpriseOne Tools 5.4 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.