Oracle Corporation 厂商相关 8870 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Oracle Corporation 主要提供企业级数据库、中间件及云计算服务。其软件历史上常见远程代码执行、权限提升及SQL注入漏洞,多源于复杂代码逻辑或配置不当。近期关注点包括Java SE及WebLogic组件中的高危缺陷,部分漏洞可被利用绕过安全机制。鉴于其广泛的企业部署,补丁更新及时性至关重要,建议用户严格遵循官方安全公告以缓解潜在风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-91597 | Oracle BI EE 8.2/26.01 平台安全漏洞 — Oracle Business Intelligence Enterprise Edition | 8.3 | High | 2026-10-20 |
| CVE-2026-91588 | Oracle BI EE 8.2.0/12.2.1 存在跨站脚本漏洞 — Oracle Business Intelligence Enterprise Edition | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91579 | Oracle BI Publisher 多版本存在可接管系统的漏洞 — Oracle BI Publisher | 8.8 | High | 2026-10-20 |
| CVE-2026-91577 | Oracle BI EE 12.2.1.4.0 远程数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition | 6.4 | Medium | 2026-10-20 |
| CVE-2026-91582 | Oracle BI 12.2.1.4.0 BI Search 部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition | 3.7 | Low | 2026-10-20 |
| CVE-2026-91576 | Oracle BI EE 12.2.1.4.0 远程未授权访问漏洞 — Oracle Business Intelligence Enterprise Edition | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91574 | Oracle BI Publisher 多版本 HTTP 未授权访问漏洞 — Oracle BI Publisher | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91573 | Oracle Agile PLM 6.2.4 远程未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.2 | High | 2026-10-20 |
| CVE-2026-91565 | Oracle Agile PLM 6.2.4 未授权访问漏洞 — Oracle Agile Product Lifecycle Management for Process | 6.4 | Medium | 2026-10-20 |
| CVE-2026-91568 | Oracle 23.4.0-23.26.3 RDBMS 远程未授权访问漏洞 — Oracle Database Server | 7.7 | High | 2026-10-20 |
| CVE-2026-91563 | Oracle OLAP 19/21/23 远程代码执行漏洞 — Oracle OLAP | 8.8 | High | 2026-10-20 |
| CVE-2026-91559 | Oracle PeopleSoft 9.1 集成组件数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise FIN Manufacturing Brazil | 4.4 | Medium | 2026-10-20 |
| CVE-2026-91562 | Oracle PeopleSoft 9.1 巴西库存组件越权与拒绝服务漏洞 — PeopleSoft Enterprise FIN Inventory Brazil | 4.4 | Medium | 2026-10-20 |
| CVE-2026-91554 | Oracle BI Publisher 12.2.1.4.0 未授权数据篡改漏洞 — Oracle BI Publisher | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91557 | Oracle BI EE 12.2.1.4.0 低权限接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.0 | High | 2026-10-20 |
| CVE-2026-91555 | Oracle BI Publisher 多版本存在需交互的远程数据篡改漏洞 — Oracle BI Publisher | 6.1 | Medium | 2026-10-20 |
| CVE-2026-91553 | Oracle PeopleSoft 9.1 配置器数据篡改与拒绝服务漏洞 — PeopleSoft Enterprise FIN Product Configurator Brazil | 4.4 | Medium | 2026-10-20 |
| CVE-2026-91550 | Oracle Agile PPM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.8 | High | 2026-10-20 |
| CVE-2026-91552 | Oracle WebCenter Sites 12.2.1.4/14.1.2 远程未授权访问漏洞 — Oracle WebCenter Sites | 7.5 | High | 2026-10-20 |
| CVE-2026-91549 | Oracle BI EE 8.2.0/12.2.1.4 本地未认证接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91546 | Oracle BI EE 12.2.1.4.0 未认证远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.1 | High | 2026-10-20 |
| CVE-2026-91547 | Oracle GoldenGate 19.1-23.26 低权限未授权访问漏洞 — Oracle GoldenGate | 5.5 | Medium | 2026-10-20 |
| CVE-2026-91545 | Oracle BI EE 8.2/12.2.1.4 本地未授权接管漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91542 | Oracle WebCenter Sites 12.2.1.4.0/14.1.2.0.0 远程未授权访问漏洞 — Oracle WebCenter Sites | 7.5 | High | 2026-10-20 |
| CVE-2026-91539 | Oracle BI EE 12.2.1.4.0 远程代码执行漏洞 — Oracle Business Intelligence Enterprise Edition | 7.8 | High | 2026-10-20 |
| CVE-2026-91541 | Oracle PeopleSoft 9.1 远程未授权数据篡改漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91537 | Oracle Solaris 11.4 Utility 组件低权限提权漏洞 — Oracle Solaris | 7.8 | High | 2026-10-20 |
| CVE-2026-91536 | Oracle SOA Suite 12.2.1.4.0 与 14.1.2.0.0 远程数据篡改漏洞 — Oracle SOA Suite | 5.0 | Medium | 2026-10-20 |
| CVE-2026-91535 | Oracle BI EE 多版本 BI Search 组件远程接管漏洞 — Oracle Business Intelligence Enterprise Edition | 8.8 | High | 2026-10-20 |
| CVE-2026-91534 | Oracle BI EE 8.2/12.2/26.01 远程拒绝服务与数据篡改漏洞 — Oracle Business Intelligence Enterprise Edition | 8.6 | High | 2026-10-20 |
本页汇总了 Oracle Corporation 厂商截至目前公开的全部 8870 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。