Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Oracle Corporation — Vulnerabilities & Security Advisories 8869

Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.

Top products by Oracle Corporation: MySQL Server VM VirtualBox WebLogic Server PeopleSoft Enterprise PT PeopleTools Java Oracle Hyperion Financial Management JD Edwards EnterpriseOne Tools Oracle VM VirtualBox PeopleSoft Enterprise PeopleTools Solaris Operating System Helidon Outside In Technology Oracle Coherence Oracle WebCenter Content Oracle Commerce Guided Search / Oracle Commerce Experience Manager Oracle Java SE Java SE JDK and JRE MySQL Cluster Oracle Business Intelligence Enterprise Edition Siebel CRM Deployment Oracle Hyperion Infrastructure Technology Oracle WebCenter Portal Database - Enterprise Edition Siebel CRM Cloud Applications BI Publisher (formerly XML Publisher) Oracle WebLogic Server Oracle Hyperion Data Relationship Management Oracle Database Server FLEXCUBE Universal Banking Enterprise Manager Base Platform
CVE ID Title CVSS Severity Published
CVE-2026-91390 Oracle Siebel CRM 17.0-26.9 Open UI 跨站请求伪造漏洞 — Siebel CRM End User 5.4 Medium 2026-10-20
CVE-2026-91388 Oracle Siebel CRM 17.0-26.9 Open UI 跨站脚本漏洞 — Siebel CRM End User 4.7 Medium 2026-10-20
CVE-2026-91389 Oracle Siebel CRM 17.0-26.9 跨站脚本漏洞 — Siebel CRM End User 5.4 Medium 2026-10-20
CVE-2026-91385 CVE-2026-91385 — Oracle Java SE 5.4 Medium 2026-10-20
CVE-2026-91386 Oracle JD Edwards 9.2 物理访问导致数据泄露与篡改漏洞 — JD Edwards EnterpriseOne Orchestrator 6.8 Medium 2026-10-20
CVE-2026-91387 Oracle Siebel CRM 17.0-26.9 远程数据篡改漏洞 — Siebel CRM End User 5.4 Medium 2026-10-20
CVE-2026-91384 Oracle JD Edwards 9.2.x Web Runtime 远程未授权访问漏洞 — JD Edwards EnterpriseOne Tools 6.5 Medium 2026-10-20
CVE-2026-91382 CVE-2026-91382 — Oracle Java SE 6.5 Medium 2026-10-20
CVE-2026-91383 Oracle JD Edwards 9.2.0-9.2.26.5 权限提升漏洞 — JD Edwards EnterpriseOne Tools 6.6 Medium 2026-10-20
CVE-2026-91379 CVE-2026-91379 — Oracle Java SE 4.7 Medium 2026-10-20
CVE-2026-91380 CVE-2026-91380 — Oracle Java SE 4.0 Medium 2026-10-20
CVE-2026-91381 CVE-2026-91381 — Oracle Java SE 3.7 Low 2026-10-20
CVE-2026-91378 Oracle Siebel CRM 25.12-26.9 跨站请求伪造漏洞 — Siebel CRM Integration 6.1 Medium 2026-10-20
CVE-2026-91376 CVE-2026-91376 — Primavera P6 Enterprise Project Portfolio Management 6.5 Medium 2026-10-20
CVE-2026-91377 Oracle Siebel CRM 25.12-26.9 远程未授权访问漏洞 — Siebel CRM Integration 7.5 High 2026-10-20
CVE-2026-91375 CVE-2026-91375 — Oracle Java SE 4.7 Medium 2026-10-20
CVE-2026-91374 CVE-2026-91374 — Oracle Java SE 4.8 Medium 2026-10-20
CVE-2026-91373 CVE-2026-91373 — Oracle Java SE 5.3 Medium 2026-10-20
CVE-2026-91372 Oracle Siebel CRM 22.3-26.9 低权限未授权读取漏洞 — Siebel CRM Cloud Applications 3.3 Low 2026-10-20
CVE-2026-91371 Oracle Siebel CRM 22.3-26.9 未授权数据读取漏洞 — Siebel CRM Cloud Applications 5.8 Medium 2026-10-20
CVE-2026-91368 Oracle Siebel 22.3-26.9 未授权访问漏洞 — Siebel CRM Cloud Applications 4.1 Medium 2026-10-20
CVE-2026-91370 Oracle Siebel CRM 22.3-26.9 未授权数据读取漏洞 — Siebel CRM Cloud Applications 5.3 Medium 2026-10-20
CVE-2026-91369 Oracle Siebel CRM 22.3-26.9 数据篡改漏洞 — Siebel CRM Cloud Applications 5.3 Medium 2026-10-20
CVE-2026-91367 Oracle Siebel CRM 22.3-26.9 数据访问漏洞 — Siebel CRM Cloud Applications 6.5 Medium 2026-10-20
CVE-2026-91366 Oracle Siebel 22.3-26.9 未授权数据篡改漏洞 — Siebel CRM Cloud Applications 4.7 Medium 2026-10-20
CVE-2026-91365 Oracle Siebel CRM 22.3-26.9 未认证攻击漏洞 — Siebel CRM Cloud Applications 5.9 Medium 2026-10-20
CVE-2026-91364 Oracle Siebel CRM 22.3-26.9 未认证数据篡改漏洞 — Siebel CRM Cloud Applications 6.8 Medium 2026-10-20
CVE-2026-91362 Oracle Siebel CRM 22.3-26.9 未授权数据读取漏洞 — Siebel CRM Cloud Applications 5.3 Medium 2026-10-20
CVE-2026-91363 Oracle Siebel CRM 22.3-26.9 未授权读取漏洞 — Siebel CRM Cloud Applications 3.7 Low 2026-10-20
CVE-2026-91359 Oracle Siebel 22.3-26.9 远程未授权读取漏洞 — Siebel CRM Cloud Applications 5.3 Medium 2026-10-20

This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.