Browse all 8869 CVE security advisories affecting Oracle Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Oracle Corporation primarily develops enterprise software, databases, and cloud computing services, serving as critical infrastructure for global businesses. Its extensive codebase has historically been associated with a high volume of vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from complex legacy systems and third-party integrations within its vast product suite. Notable incidents include critical zero-day exploits affecting Java and WebLogic Server, which frequently require immediate patching to prevent unauthorized access or data exfiltration. The sheer number of recorded CVEs reflects the breadth of its offerings rather than inherent insecurity, yet it underscores the necessity for rigorous vulnerability management. Organizations relying on Oracle technologies must prioritize regular updates and strict access controls to mitigate risks associated with these historically common attack vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-83259 | Oracle Commerce 11.4.0 远程未授权访问及DoS漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.1 | High | 2026-09-15 |
| CVE-2026-83258 | Oracle Commerce 11.4.0远程未授权接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83256 | Oracle Commerce 11.4.0 未授权接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83254 | Oracle Commerce 11.4.0 未授权接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83257 | Oracle Commerce 11.4.0 远程接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.5 | High | 2026-09-15 |
| CVE-2026-83255 | Oracle Commerce 11.4.0 未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83252 | Oracle Commerce Guided Search 11.4.0未认证数据访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.0 | High | 2026-09-15 |
| CVE-2026-83253 | Oracle Commerce 11.4.0 未认证攻击者可接管 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.8 | High | 2026-09-15 |
| CVE-2026-83251 | Oracle Commerce 11.4.0 拒绝服务漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 6.5 | Medium | 2026-09-15 |
| CVE-2026-83249 | Oracle Commerce 11.4.0 低权限接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.8 | High | 2026-09-15 |
| CVE-2026-83250 | Oracle Commerce 11.4.0未认证访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 6.5 | Medium | 2026-09-15 |
| CVE-2026-83248 | Oracle Commerce 11.4.0:未认证远程DoS与数据读取 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.2 | High | 2026-09-15 |
| CVE-2026-83246 | Oracle Commerce 11.4.0未认证攻击者接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83245 | Oracle Commerce 11.4.0 Forge远程接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-09-15 |
| CVE-2026-83247 | Oracle Commerce 11.4.0 未认证攻击者接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.8 | High | 2026-09-15 |
| CVE-2026-83242 | Oracle Commerce Experience Manager 11.4.0 未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.3 | High | 2026-09-15 |
| CVE-2026-83243 | Oracle Commerce 11.4.0 Experience Manager 未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.7 | High | 2026-09-15 |
| CVE-2026-83244 | CVE-2026-83244 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.1 | High | 2026-09-15 |
| CVE-2026-83240 | Oracle Commerce 11.4.0 低权限攻击致数据篡改及服务中断 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.1 | High | 2026-09-15 |
| CVE-2026-83241 | Oracle Commerce 11.4.0 未认证接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.5 | High | 2026-09-15 |
| CVE-2026-83239 | Oracle Commerce 11.4.0 Endeca控制器接管漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.0 | High | 2026-09-15 |
| CVE-2026-83238 | Oracle Commerce 11.4.0 未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.1 | High | 2026-09-15 |
| CVE-2026-83236 | CVE-2026-83236 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.2 | High | 2026-09-15 |
| CVE-2026-83237 | Oracle Commerce 11.4.0 远程未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.1 | High | 2026-09-15 |
| CVE-2026-83234 | Oracle Commerce 11.4.0 未授权数据访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.2 | High | 2026-09-15 |
| CVE-2026-83235 | Oracle Commerce 11.4.0 未授权访问漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.5 | High | 2026-09-15 |
| CVE-2026-83233 | Oracle Commerce 11.4.0经验管理器数据泄露漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.7 | High | 2026-09-15 |
| CVE-2026-71038 | Oracle Commerce 安全漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 7.5 | High | 2026-08-18 |
| CVE-2026-71035 | Oracle Commerce 安全漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 8.1 | High | 2026-08-18 |
| CVE-2026-71036 | Oracle Commerce 安全漏洞 — Oracle Commerce Guided Search / Oracle Commerce Experience Manager | 9.1 | Critical | 2026-08-18 |
This page lists every published CVE security advisory associated with Oracle Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.