Oracle Corporation 厂商相关 8870 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Oracle Corporation 主要提供企业级数据库、中间件及云计算服务。其软件历史上常见远程代码执行、权限提升及SQL注入漏洞,多源于复杂代码逻辑或配置不当。近期关注点包括Java SE及WebLogic组件中的高危缺陷,部分漏洞可被利用绕过安全机制。鉴于其广泛的企业部署,补丁更新及时性至关重要,建议用户严格遵循官方安全公告以缓解潜在风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-91492 | Oracle Identity Manager Connector 12.2.1.4.0 及 14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector | 8.7 | High | 2026-10-20 |
| CVE-2026-91487 | Oracle Java SE 多版本编译器数据篡改漏洞 — Oracle Java SE | 4.8 | Medium | 2026-10-20 |
| CVE-2026-91489 | Oracle Identity Manager 12.2.1.4.0/14.1.2.1.0 本地提权漏洞 — Oracle Identity Manager Connector | 7.1 | High | 2026-10-20 |
| CVE-2026-91488 | Oracle OIM Connector 12.2.1.4.0/14.1.2.1.0 未授权访问漏洞 — Oracle Identity Manager Connector | 7.1 | High | 2026-10-20 |
| CVE-2026-91484 | CVE-2026-91484 — Oracle Java SE | 7.5 | High | 2026-10-20 |
| CVE-2026-91485 | Oracle PeopleSoft 9.2 现金管理越权与拒绝服务漏洞 — PeopleSoft Enterprise FIN Cash Management | 3.8 | Low | 2026-10-20 |
| CVE-2026-91486 | Oracle PeopleSoft 9.1 巴西总账越权访问与拒绝服务漏洞 — PeopleSoft Enterprise FIN General Ledger Brazil | 4.4 | Medium | 2026-10-20 |
| CVE-2026-91481 | Oracle PeopleSoft 9.2 采购组件存在跨站脚本漏洞 — PeopleSoft Enterprise SCM Purchasing | 5.4 | Medium | 2026-10-20 |
| CVE-2026-91482 | Oracle PeopleSoft 9.2 战略采购组件未授权访问漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91483 | Oracle Outside In 8.5.8 未授权远程代码执行漏洞 — Oracle Outside In Technology | 7.8 | High | 2026-10-20 |
| CVE-2026-91479 | Oracle 23.4.0-23.26.3 RDBMS 拒绝服务漏洞 — Oracle Database Server | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91480 | Oracle PeopleSoft 9.2 战略采购远程未授权访问漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91476 | Oracle PeopleSoft 9.1 未授权数据读取漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91477 | CVE-2026-91477 — Oracle JavaFX | 3.1 | Low | 2026-10-20 |
| CVE-2026-91478 | Oracle PeopleSoft 9.2 战略采购远程接管漏洞 — PeopleSoft Enterprise SCM Strategic Sourcing | 8.8 | High | 2026-10-20 |
| CVE-2026-91474 | Oracle PeopleSoft 9.1 数据篡改漏洞 — PeopleSoft Enterprise FIN Common Objects Brazil | 6.1 | Medium | 2026-10-20 |
| CVE-2026-91473 | Oracle HTTP Server 12.2.1.4.0 远程代码执行漏洞 — Oracle HTTP Server | 7.8 | High | 2026-10-20 |
| CVE-2026-91475 | Oracle Outside In 8.5.8 数据篡改与拒绝服务漏洞 — Oracle Outside In Technology | 6.6 | Medium | 2026-10-20 |
| CVE-2026-91467 | Oracle Fusion Middleware Control 12.2.1.4.0/14.1.2.0.0 物理访问漏洞 — Oracle Fusion Middleware Control | 6.6 | Medium | 2026-10-20 |
| CVE-2026-91468 | Oracle PeopleTools 8.61-8.63 QAS 组件未授权数据篡改漏洞 — PeopleSoft Enterprise PeopleTools | 6.5 | Medium | 2026-10-20 |
| CVE-2026-91471 | Oracle PeopleSoft 9.2 无认证数据篡改漏洞 — PeopleSoft Enterprise CC Common Application Objects | 3.7 | Low | 2026-10-20 |
| CVE-2026-91464 | CVE-2026-91464 — Oracle Java SE | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91466 | CVE-2026-91466 — PeopleSoft Enterprise FIN Common Objects Argentina | 6.4 | Medium | 2026-10-20 |
| CVE-2026-91465 | Oracle PeopleSoft 9.1 远程未授权访问漏洞 — PeopleSoft Enterprise FIN Common Objects Argentina | 7.5 | High | 2026-10-20 |
| CVE-2026-91463 | CVE-2026-91463 — Oracle Java SE | 5.3 | Medium | 2026-10-20 |
| CVE-2026-91462 | CVE-2026-91462 — Oracle Java SE | 5.9 | Medium | 2026-10-20 |
| CVE-2026-91461 | CVE-2026-91461 — Oracle Java SE | 3.7 | Low | 2026-10-20 |
| CVE-2026-91459 | Oracle Outside In 8.5.8 远程代码执行漏洞 — Oracle Outside In Technology | 7.8 | High | 2026-10-20 |
| CVE-2026-91458 | Oracle Outside In 8.5.8 本地权限提升漏洞 — Oracle Outside In Technology | 7.8 | High | 2026-10-20 |
| CVE-2026-91460 | Oracle Outside In 8.5.8 本地权限提升漏洞 — Oracle Outside In Technology | 7.8 | High | 2026-10-20 |
本页汇总了 Oracle Corporation 厂商截至目前公开的全部 8870 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。