Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91607 | Oracle BI EE 8.2/26.01 存在 HTTP 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91598 | Oracle BI EE 8.2.0/26.01 远程数据读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91600 | Oracle BI EE 26.01.0.0.0 Visual Analyzer 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91588 | Oracle BI EE 8.2.0/12.2.1 存在跨站脚本漏洞 — Oracle Business Intelligence Enterprise Edition | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91597 | Oracle BI EE 8.2/26.01 平台安全漏洞 — Oracle Business Intelligence Enterprise Edition | 8.3 | High | 2026-10-20 |
| CVE-2026-91577 | Oracle BI EE 12.2.1.4.0 远程数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition | 6.4 | Medium | 2026-10-20 |
| CVE-2026-91582 | Oracle BI 12.2.1.4.0 BI Search 部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition | 3.7 | Low | 2026-10-20 |
| CVE-2026-91576 | Oracle BI EE 12.2.1.4.0 远程未授权访问漏洞 — Oracle Business Intelligence Enterprise Edition | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91557 | Oracle BI EE 12.2.1.4.0 低权限接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.0 | High | 2026-10-20 |
| CVE-2026-91546 | Oracle BI EE 12.2.1.4.0 未认证远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.1 | High | 2026-10-20 |
| CVE-2026-91549 | Oracle BI EE 8.2.0/12.2.1.4 本地未认证接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91545 | Oracle BI EE 8.2/12.2.1.4 本地未授权接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91539 | Oracle BI EE 12.2.1.4.0 远程代码执行漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91534 | Oracle BI EE 8.2/12.2/26.01 远程拒绝服务与数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition | 8.6 | High | 2026-10-20 |
| CVE-2026-91535 | Oracle BI EE 多版本 BI Search 组件远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.8 | High | 2026-10-20 |
| CVE-2026-91523 | CVE-2026-91523 — Oracle Business Intelligence Enterprise Edition | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91524 | Oracle BI EE 12.2.1.4.0 远程部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91241 | Oracle BI EE 8.2/12.2/26.01 远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 9.1 | Critical | 2026-10-20 |
| CVE-2026-87263 | Oracle BI EE 8.2.0/26.01.0远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.8 | High | 2026-10-20 |
| CVE-2026-101531 | Oracle BI EE 8.2/26.01 远程未授权数据访问漏洞 — Oracle Business Intelligence Enterprise Edition | 7.5 | High | 2026-10-20 |
| CVE-2026-83336 | Oracle BI 8.2.0/26.01 权限提升漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-09-15 |
| CVE-2026-83335 | Oracle BI EE 8.2/26.01 远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.8 | High | 2026-09-15 |
| CVE-2026-83324 | Oracle BI EE 8.2/26.01 低权限网络访问越权 — Oracle Business Intelligence Enterprise Edition | 7.1 | High | 2026-09-15 |
| CVE-2026-83325 | Oracle BI EE 8.2.0.0.0等版本高危漏洞 — Oracle Business Intelligence Enterprise Edition | 7.2 | High | 2026-09-15 |
| CVE-2026-83323 | Oracle BI EE 26.01.0.0.0 权限提升漏洞 — Oracle Business Intelligence Enterprise Edition | 7.5 | High | 2026-09-15 |
| CVE-2026-83322 | Oracle BI EE 8.2.0.0.0 高危HTTP远程接管 — Oracle Business Intelligence Enterprise Edition | 7.2 | High | 2026-09-15 |
| CVE-2026-83321 | Oracle BI 8.2.0/26.01 低权限HTTP漏洞 — Oracle Business Intelligence Enterprise Edition | 8.5 | High | 2026-09-15 |
| CVE-2026-83317 | Oracle BI EE 8.2.0.0.0 等版本低权限攻击者接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-09-15 |
| CVE-2026-83316 | Oracle BI Enterprise 26.01.0.0.0 本地低权限接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.0 | High | 2026-09-15 |
| CVE-2026-83304 | CVE-2026-83304 — Oracle Business Intelligence Enterprise Edition | 8.9 | High | 2026-09-15 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.