Oracle Corporation 厂商相关 8870 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Oracle Corporation 主要提供企业级数据库、中间件及云计算服务。其软件历史上常见远程代码执行、权限提升及SQL注入漏洞,多源于复杂代码逻辑或配置不当。近期关注点包括Java SE及WebLogic组件中的高危缺陷,部分漏洞可被利用绕过安全机制。鉴于其广泛的企业部署,补丁更新及时性至关重要,建议用户严格遵循官方安全公告以缓解潜在风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-91639 | Oracle Essbase 21.8.3.0.0 远程未授权访问漏洞 — Oracle Essbase | 7.7 | High | 2026-10-20 |
| CVE-2026-91636 | Oracle Essbase 21.8.3.0.0 远程未授权访问漏洞 — Oracle Essbase | 7.7 | High | 2026-10-20 |
| CVE-2026-91635 | Oracle Essbase 21.8.3.0.0 T3/IIOP 远程接管漏洞 — Oracle Essbase | 8.1 | High | 2026-10-20 |
| CVE-2026-91637 | Oracle Essbase 21.8.3.0.0 远程接管漏洞 — Oracle Essbase | 9.9 | Critical | 2026-10-20 |
| CVE-2026-91634 | Oracle Essbase 21.8.3.0.0 远程未授权数据读取漏洞 — Oracle Essbase | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91633 | Oracle Essbase 21.8.3.0.0 安全组件未授权访问漏洞 — Oracle Essbase | 6.0 | Medium | 2026-10-20 |
| CVE-2026-91632 | Oracle Essbase 21.8.3.0.0 远程未授权访问漏洞 — Oracle Essbase | 7.7 | High | 2026-10-20 |
| CVE-2026-91629 | Oracle 计费 15.x 平台低权限数据访问漏洞 — Oracle Communications Billing and Revenue Management | 4.7 | Medium | 2026-10-20 |
| CVE-2026-91630 | Oracle Essbase 21.8.3.0.0 安全组件远程未授权访问漏洞 — Oracle Essbase | 6.8 | Medium | 2026-10-20 |
| CVE-2026-91631 | Oracle Essbase 21.8.3.0.0 远程未授权数据读取漏洞 — Oracle Essbase | 5.0 | Medium | 2026-10-20 |
| CVE-2026-91627 | Oracle 计费产品 15.x 版本本地权限提升漏洞 — Oracle Communications Billing and Revenue Management | 7.8 | High | 2026-10-20 |
| CVE-2026-91628 | Oracle BRM 15.0-15.2 远程低权限未授权数据访问漏洞 — Oracle Communications Billing and Revenue Management | 5.5 | Medium | 2026-10-20 |
| CVE-2026-91625 | Oracle Agile PLM 6.2.4 未认证远程访问漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.2 | High | 2026-10-20 |
| CVE-2026-91624 | Oracle Agile PLM 6.2.4 远程未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process | 9.1 | Critical | 2026-10-20 |
| CVE-2026-91622 | CVE-2026-91622 — Oracle Agile Product Lifecycle Management for Process | 9.3 | Critical | 2026-10-20 |
| CVE-2026-91617 | Oracle Fusion Middleware 12.2/14.1/15.1 远程诊断代理未授权访问漏洞 — Oracle Middleware Common Libraries and Tools | 5.5 | Medium | 2026-10-20 |
| CVE-2026-91623 | Oracle Agile PLM 6.2.4 远程数据篡改漏洞 — Oracle Agile Product Lifecycle Management for Process | 7.4 | High | 2026-10-20 |
| CVE-2026-91614 | Oracle Unified Inventory Management 多版本未授权读取漏洞 — Oracle Communications Unified Inventory Management | 3.3 | Low | 2026-10-20 |
| CVE-2026-91616 | Oracle Fusion Middleware 12.2.1.4.0/14.1.1.0.0 未授权读取漏洞 — Oracle Middleware Common Libraries and Tools | 3.7 | Low | 2026-10-20 |
| CVE-2026-91615 | Oracle DB 19/21/23 Java VM 权限提升漏洞 — Oracle Database Server | 6.3 | Medium | 2026-10-20 |
| CVE-2026-91613 | Oracle UIM 7.5-8.0 存在低权限未授权数据读取漏洞 — Oracle Communications Unified Inventory Management | 3.3 | Low | 2026-10-20 |
| CVE-2026-91612 | Oracle Unified Inventory Management 7.5-8.0 信息泄露漏洞 — Oracle Communications Unified Inventory Management | 3.3 | Low | 2026-10-20 |
| CVE-2026-91610 | Oracle REST Data Services 24.2.0-26.2.2 远程接管漏洞 — Oracle REST Data Services | 8.8 | High | 2026-10-20 |
| CVE-2026-91609 | Oracle REST Data Services 24.2.0-26.2.1 未授权访问漏洞 — Oracle REST Data Services | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91607 | Oracle BI EE 8.2/26.01 存在 HTTP 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91608 | Oracle BI Publisher 多版本远程未授权访问漏洞 — Oracle BI Publisher | 7.5 | High | 2026-10-20 |
| CVE-2026-91598 | Oracle BI EE 8.2.0/26.01 远程数据读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91604 | Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process | 7.5 | High | 2026-10-20 |
| CVE-2026-91600 | Oracle BI EE 26.01.0.0.0 Visual Analyzer 未授权读取漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91590 | Oracle BI Publisher 8.2.0/26.01 存在跨站脚本漏洞 — Oracle BI Publisher | 5.4 | Medium | 2026-10-20 |
本页汇总了 Oracle Corporation 厂商截至目前公开的全部 8870 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。