Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91455 | Oracle JD Edwards 9.2.0-9.2.26.5 跨站脚本漏洞 — JD Edwards EnterpriseOne Tools | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91384 | Oracle JD Edwards 9.2.x Web Runtime 远程未授权访问漏洞 — JD Edwards EnterpriseOne Tools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91383 | Oracle JD Edwards 9.2.0-9.2.26.5 权限提升漏洞 — JD Edwards EnterpriseOne Tools | 6.6 | Medium | 2026-10-20 |
| CVE-2026-91329 | Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91330 | Oracle JD Edwards 9.2 安装安全部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools | 3.3 | Low | 2026-10-20 |
| CVE-2026-91328 | Oracle JD Edwards 9.2 部署安全组件远程接管漏洞 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91326 | Oracle JD Edwards 9.2.0-9.2.26.4 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 8.8 | High | 2026-10-20 |
| CVE-2026-91327 | Oracle JD Edwards 9.2.x 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.5 | High | 2026-10-20 |
| CVE-2026-91325 | Oracle JD Edwards 9.2 安装安全未授权访问漏洞 — JD Edwards EnterpriseOne Tools | 7.5 | High | 2026-10-20 |
| CVE-2026-91315 | Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91314 | Oracle JD Edwards 9.2.x 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91311 | Oracle JD Edwards 9.2 安装安全漏洞可致系统被接管 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91312 | Oracle JD Edwards 9.2.0-9.2.26.5 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91313 | Oracle JD Edwards 9.2.0-9.2.26.4 远程接管漏洞 — JD Edwards EnterpriseOne Tools | 8.1 | High | 2026-10-20 |
| CVE-2026-91310 | Oracle JD Edwards 9.2 安装组件远程接管漏洞 — JD Edwards EnterpriseOne Tools | 8.8 | High | 2026-10-20 |
| CVE-2026-91309 | Oracle JD Edwards 9.2 系列 Interoperability 组件未授权访问漏洞 — JD Edwards EnterpriseOne Tools | 5.9 | Medium | 2026-10-20 |
| CVE-2026-91308 | Oracle JD Edwards 9.2 安装安全未授权访问漏洞 — JD Edwards EnterpriseOne Tools | 7.5 | High | 2026-10-20 |
| CVE-2026-91307 | Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.5 | High | 2026-10-20 |
| CVE-2026-91305 | Oracle JD Edwards 9.2 安装安全远程代码执行漏洞 — JD Edwards EnterpriseOne Tools | 9.1 | Critical | 2026-10-20 |
| CVE-2026-91306 | Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91304 | Oracle JD Edwards 9.2 安装安全漏洞 — JD Edwards EnterpriseOne Tools | 7.8 | High | 2026-10-20 |
| CVE-2026-91302 | Oracle JD Edwards 9.2.x 部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools | 3.3 | Low | 2026-10-20 |
| CVE-2026-91303 | Oracle JD Edwards 9.2 安装安全远程接管漏洞 — JD Edwards EnterpriseOne Tools | 8.8 | High | 2026-10-20 |
| CVE-2026-91301 | Oracle JD Edwards 9.2 低权限数据篡改与拒绝服务漏洞 — JD Edwards EnterpriseOne Tools | 3.6 | Low | 2026-10-20 |
| CVE-2026-91300 | Oracle JD Edwards 9.2 存在需交互的未授权数据篡改漏洞 — JD Edwards EnterpriseOne Tools | 3.1 | Low | 2026-10-20 |
| CVE-2026-91298 | Oracle JD Edwards 9.2 跨站请求伪造漏洞 — JD Edwards EnterpriseOne Tools | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91297 | Oracle JD Edwards 9.2.x 跨站脚本漏洞 — JD Edwards EnterpriseOne Tools | 6.1 | Medium | 2026-10-20 |
| CVE-2026-91294 | Oracle JD Edwards 9.2 部分拒绝服务漏洞 — JD Edwards EnterpriseOne Tools | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91295 | Oracle JD Edwards 9.2.0.0-9.2.26.5 远程接管漏洞 — JD Edwards EnterpriseOne Tools | 8.8 | High | 2026-10-20 |
| CVE-2026-91296 | Oracle JD Edwards 9.2.0-9.2.26.5 远程代码执行漏洞 — JD Edwards EnterpriseOne Tools | 8.8 | High | 2026-10-20 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.