Oracle Corporation 厂商相关 8870 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Oracle Corporation 主要提供企业级数据库、中间件及云计算服务。其软件历史上常见远程代码执行、权限提升及SQL注入漏洞,多源于复杂代码逻辑或配置不当。近期关注点包括Java SE及WebLogic组件中的高危缺陷,部分漏洞可被利用绕过安全机制。鉴于其广泛的企业部署,补丁更新及时性至关重要,建议用户严格遵循官方安全公告以缓解潜在风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-91532 | Oracle EBS 12.2.3-15 远程接管漏洞 — Oracle Applications Manager | 8.8 | High | 2026-10-20 |
| CVE-2026-91530 | Oracle GoldenGate 23.4-23.26 远程未授权访问漏洞 — Oracle GoldenGate | 4.4 | Medium | 2026-10-20 |
| CVE-2026-91528 | Oracle BI Publisher 12.2.1.4.0 低权限未授权读取漏洞 — Oracle BI Publisher | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91527 | Oracle ZFS 8.8 远程代码执行漏洞 — Oracle ZFS Storage Appliance Kit | 8.8 | High | 2026-10-20 |
| CVE-2026-91526 | Oracle BI Publisher 多版本未授权数据访问漏洞 — Oracle BI Publisher | 4.7 | Medium | 2026-10-20 |
| CVE-2026-91521 | Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.8 | High | 2026-10-20 |
| CVE-2026-91524 | Oracle BI EE 12.2.1.4.0 远程部分拒绝服务漏洞 — Oracle Business Intelligence Enterprise Edition | 4.3 | Medium | 2026-10-20 |
| CVE-2026-91523 | CVE-2026-91523 — Oracle Business Intelligence Enterprise Edition | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91519 | Oracle PeopleSoft 8.61-8.63 报告分发组件远程访问漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91518 | Oracle BI Publisher 多版本存在数据篡改与读取漏洞 — Oracle BI Publisher | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91520 | Oracle Agile PLM 6.2.4 远程代码执行漏洞 — Oracle Agile Product Lifecycle Management for Process | 8.8 | High | 2026-10-20 |
| CVE-2026-91515 | Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process | 7.5 | High | 2026-10-20 |
| CVE-2026-91517 | Oracle GoldenGate 13.4-13.5 远程代码执行漏洞 — Oracle Management Pack for Oracle GoldenGate | 8.0 | High | 2026-10-20 |
| CVE-2026-91514 | Oracle BI Publisher 多版本 HTTP 未授权访问漏洞 — Oracle BI Publisher | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91512 | Oracle Agile PLM 6.2.4 远程接管漏洞 — Oracle Agile Product Lifecycle Management for Process | 7.2 | High | 2026-10-20 |
| CVE-2026-91506 | Oracle EBS 12.2.3-15 Workflow 远程接管漏洞 — Workflow | 8.1 | High | 2026-10-20 |
| CVE-2026-91511 | Oracle E-Business Suite 12.2.3-15 购买模块远程数据泄露漏洞 — Oracle Purchasing | 7.1 | High | 2026-10-20 |
| CVE-2026-91503 | Oracle Database VPD 组件远程数据篡改漏洞 — Oracle Database Server | 8.1 | High | 2026-10-20 |
| CVE-2026-91505 | Oracle PeopleTools 8.61/8.62 权限提升漏洞 — PeopleSoft Enterprise PeopleTools | 6.0 | Medium | 2026-10-20 |
| CVE-2026-91504 | Oracle WebCenter Content 12.2.1.4/14.1.2.0 远程接管漏洞 — Oracle WebCenter Content | 7.5 | High | 2026-10-20 |
| CVE-2026-91499 | Oracle 23.4.0-23.26.3 RDBMS 远程接管漏洞 — Oracle Database Server | 8.8 | High | 2026-10-20 |
| CVE-2026-91502 | Oracle WebLogic 12.2.1.4 等版本存在未授权数据篡改漏洞 — Oracle WebLogic Server | 7.3 | High | 2026-10-20 |
| CVE-2026-91501 | Oracle Identity Manager 12.2.1.4 及 14.1.2.1 安装程序越权漏洞 — Oracle Identity Manager | 5.5 | Medium | 2026-10-20 |
| CVE-2026-91497 | Oracle PeopleSoft 8.61-8.63 未授权数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91496 | Oracle EBS Workflow 12.2.3-15 远程接管漏洞 — Workflow | 7.5 | High | 2026-10-20 |
| CVE-2026-91495 | Oracle WebCenter Content 12.2.1.4.0/14.1.2.0.0远程接管漏洞 — Oracle WebCenter Content | 9.8 | Critical | 2026-10-20 |
| CVE-2026-91494 | Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0 远程代码执行 — Oracle Identity Manager Connector | 7.4 | High | 2026-10-20 |
| CVE-2026-91493 | Oracle Identity Manager Connector 12.2/14.1 未授权访问漏洞 — Oracle Identity Manager Connector | 7.5 | High | 2026-10-20 |
| CVE-2026-91490 | Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector | 9.1 | Critical | 2026-10-20 |
| CVE-2026-91491 | Oracle Identity Manager Connector 12.2.1.4.0/14.1.2.1.0远程代码执行漏洞 — Oracle Identity Manager Connector | 9.8 | Critical | 2026-10-20 |
本页汇总了 Oracle Corporation 厂商截至目前公开的全部 8870 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。