Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91360 | Oracle Siebel CRM 22.3-26.9 远程未授权访问漏洞 — Siebel CRM Cloud Applications | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91361 | Oracle Siebel CRM 22.3-26.9 未授权数据篡改漏洞 — Siebel CRM Cloud Applications | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91357 | Oracle EBS 12.2.3-15 订单管理未授权访问漏洞 — Oracle Order Management | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91358 | Oracle BPM 12.2.1.4/14.1.2.0 未授权访问漏洞 — Oracle Business Process Management Suite | 8.2 | High | 2026-10-20 |
| CVE-2026-91356 | Oracle PeopleSoft 9.2 瑞士薪资未授权数据访问漏洞 — PeopleSoft Enterprise HCM Global Payroll Switzerland | 4.2 | Medium | 2026-10-20 |
| CVE-2026-91354 | Oracle Outside In 8.5.8远程代码执行漏洞 — Oracle Outside In Technology | 9.9 | Critical | 2026-10-20 |
| CVE-2026-91355 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 8.4 | High | 2026-10-20 |
| CVE-2026-91352 | Oracle Outside In 8.5.8 远程部分拒绝服务漏洞 — Oracle Outside In Technology | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91351 | Oracle Outside In Clean Content SDK 8.5.8 权限提升漏洞 — Oracle Outside In Technology | 6.1 | Medium | 2026-10-20 |
| CVE-2026-91353 | Oracle Outside In 8.5.8 远程未授权访问漏洞 — Oracle Outside In Technology | 8.6 | High | 2026-10-20 |
| CVE-2026-91350 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-91348 | Oracle Solaris 11.3/11.4 工具组件任意代码执行漏洞 — Oracle Solaris | 8.4 | High | 2026-10-20 |
| CVE-2026-91349 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-91347 | Oracle EBS iSupport 12.2.3-15 远程代码执行漏洞 — iSupport | 8.5 | High | 2026-10-20 |
| CVE-2026-91346 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 8.2 | High | 2026-10-20 |
| CVE-2026-91345 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-91342 | Oracle Outside In 8.5.8 远程数据篡改漏洞 — Oracle Outside In Technology | 8.2 | High | 2026-10-20 |
| CVE-2026-91343 | Oracle Outside In 8.5.8 远程未认证数据篡改漏洞 — Oracle Outside In Technology | 8.6 | High | 2026-10-20 |
| CVE-2026-91344 | Oracle Outside In 8.5.8 远程拒绝服务漏洞 — Oracle Outside In Technology | 7.5 | High | 2026-10-20 |
| CVE-2026-91341 | Oracle Outside In 8.5.8 远程代码执行与拒绝服务漏洞 — Oracle Outside In Technology | 9.1 | Critical | 2026-10-20 |
| CVE-2026-91340 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 8.8 | High | 2026-10-20 |
| CVE-2026-91339 | Oracle EBS iSupport 12.2.3-15 远程未授权访问 — iSupport | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91338 | Oracle EBS iSupport 12.2.3-15 远程数据篡改漏洞 — iSupport | 7.1 | High | 2026-10-20 |
| CVE-2026-91337 | Oracle E-Business Suite iProcurement 12.2.3-12.2.15 未授权访问漏洞 — iProcurement | 7.4 | High | 2026-10-20 |
| CVE-2026-91334 | CVE-2026-91334 — Oracle Java SE | 3.7 | Low | 2026-10-20 |
| CVE-2026-91336 | Oracle Solaris 11.4 Utility 组件权限提升漏洞 — Oracle Solaris | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91335 | CVE-2026-91335 — Oracle Java SE | 2.6 | Low | 2026-10-20 |
| CVE-2026-91333 | Oracle Java SE 21/25/27 安全组件数据篡改漏洞 — Oracle Java SE | 3.7 | Low | 2026-10-20 |
| CVE-2026-91332 | CVE-2026-91332 — Oracle Java SE | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91331 | Oracle PeopleSoft 9.2 存在 HTTP 未授权数据访问漏洞 — PeopleSoft Enterprise CC Common Application Objects | 3.8 | Low | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.