Configurator

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-21972 MEDIUM This Month

Configurator contains a vulnerability that allows attackers to unauthorized read access to a subset of Oracle Configurator accessible data (CVSS 5.3).

Oracle Configurator

NVD

CVSS 3.1

5.3

EPSS

0.0%

CVE-2025-30728 HIGH PATCH This Week

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Oracle Authentication Bypass Configurator

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2025-30720 MEDIUM This Month

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Configurator

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2026-21972

EPSS 0% CVSS 5.3

MEDIUM This Month

Configurator contains a vulnerability that allows attackers to unauthorized read access to a subset of Oracle Configurator accessible data (CVSS 5.3).

Oracle Configurator

NVD

CVE-2025-30728

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Oracle Authentication Bypass Configurator

NVD

CVE-2025-30720

EPSS 0% CVSS 6.1

MEDIUM This Month

Oracle Authentication Bypass Configurator

NVD