Oracle

7773 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-2085 HIGH This Week

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Crm Technical Foundation

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2084 HIGH This Week

Oracle Authentication Bypass Crm Technical Foundation

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2083 HIGH This Week

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Responsibilities). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Isupport

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2082 HIGH This Week

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Istore

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2081 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

1.8%

CVE-2021-2080 HIGH This Week

Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Configurator

NVD

CVSS 3.1

8.2

EPSS

1.3%

CVE-2021-2079 HIGH This Week

Oracle Authentication Bypass Configurator

NVD

CVSS 3.1

8.2

EPSS

1.3%

CVE-2021-2078 HIGH This Week

Oracle Authentication Bypass Configurator

NVD

CVSS 3.1

8.2

EPSS

1.3%

CVE-2021-2077 HIGH This Week

Oracle Authentication Bypass Istore

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2076 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2075 CRITICAL Act Now

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Information Disclosure Weblogic Server

NVD

CVSS 3.1

9.8

EPSS

3.8%

CVE-2021-2074 HIGH This Week

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

Oracle Information Disclosure Vm Virtualbox

NVD

CVSS 3.1

8.2

EPSS

0.5%

CVE-2021-2073 MEDIUM This Month

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Oracle Vm Virtualbox

NVD

CVSS 3.1

4.4

EPSS

0.5%

CVE-2021-2072 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2071 HIGH This Week

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Elastic Oracle Information Disclosure Peoplesoft Enterprise Peopletools

NVD

CVSS 3.1

8.1

EPSS

1.6%

CVE-2021-2070 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2069 HIGH This Week

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Oracle Outside In Technology

NVD

CVSS 3.1

8.6

EPSS

1.4%

CVE-2021-2068 HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVSS 3.1

8.6

EPSS

1.4%

CVE-2021-2067 HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVSS 3.1

8.6

EPSS

1.4%

CVE-2021-2066 HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVSS 3.1

8.6

EPSS

1.4%

CVE-2021-2065 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2064 CRITICAL Act Now

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Information Disclosure Weblogic Server

NVD

CVSS 3.1

9.8

EPSS

3.7%

CVE-2021-2063 HIGH This Week

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Oracle Information Disclosure Peoplesoft Enterprise Peopletools

NVD

CVSS 3.1

8.4

EPSS

0.4%

CVE-2021-2062 HIGH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVSS 3.1

7.6

EPSS

0.9%

CVE-2021-2061 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.4

EPSS

1.7%

CVE-2021-2060 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2059 MEDIUM This Month

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Istore

NVD

CVSS 3.1

5.3

EPSS

1.2%

CVE-2021-2058 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2057 MEDIUM This Month

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Retail Customer Management And Segmentation Foundation

NVD

CVSS 3.1

6.3

EPSS

0.9%

CVE-2021-2056 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.4

EPSS

1.7%

CVE-2021-2055 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2054 HIGH This Week

Vulnerability in the RDBMS Sharding component of Oracle Database Server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Information Disclosure Rdbms Sharding

NVD

CVSS 3.1

7.2

EPSS

1.7%

CVE-2021-2052 MEDIUM This Month

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Jd Edwards Enterpriseone Orchestrator

NVD

CVSS 3.1

5.8

EPSS

1.4%

CVE-2021-2051 HIGH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVSS 3.1

7.6

EPSS

1.1%

CVE-2021-2050 HIGH This Week

Denial Of Service Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVSS 3.1

7.6

EPSS

1.1%

CVE-2021-2049 HIGH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVSS 3.1

7.6

EPSS

1.1%

CVE-2021-2048 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

5.0

EPSS

1.6%

CVE-2021-2047 CRITICAL Act Now

Oracle Information Disclosure Weblogic Server

NVD

CVSS 3.1

9.8

EPSS

3.8%

CVE-2021-2046 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

6.8

EPSS

2.2%

CVE-2021-2045 LOW Monitor

Vulnerability in the Oracle Text component of Oracle Database Server. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle Text

NVD

CVSS 3.1

3.1

EPSS

0.9%

CVE-2021-2044 MEDIUM This Month

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Peoplesoft Enterprise Fin Payables

NVD

CVSS 3.1

6.5

EPSS

1.2%

CVE-2021-2043 MEDIUM This Month

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Peoplesoft Enterprise Peopletools

NVD

CVSS 3.1

6.1

EPSS

1.0%

CVE-2021-2042 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

2.3

EPSS

0.4%

CVE-2021-2041 HIGH This Week

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Oracle Information Disclosure Business Intelligence

NVD

CVSS 3.1

8.1

EPSS

1.4%

CVE-2021-2040 MEDIUM This Month

Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Argus Safety

NVD

CVSS 3.1

6.1

EPSS

1.0%

CVE-2021-2039 HIGH This Week

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Siebel Core Server Framework

NVD

CVSS 3.1

7.6

EPSS

0.9%

CVE-2021-2038 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.4

EPSS

1.7%

CVE-2021-2036 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2035 HIGH This Week

Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Information Disclosure Rdbms Scheduler

NVD

CVSS 3.1

8.8

EPSS

1.4%

CVE-2021-2034 HIGH This Week

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Common Applications Calendar

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2033 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Weblogic Server

NVD

CVSS 3.1

4.3

EPSS

1.7%

CVE-2021-2032 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.3

EPSS

1.6%

CVE-2021-2031 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2030 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2029 CRITICAL Act Now

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Information Disclosure Scripting

NVD

CVSS 3.1

9.8

EPSS

1.7%

CVE-2021-2028 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2027 HIGH This Week

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Marketing

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2026 HIGH This Week

Oracle Authentication Bypass Marketing

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2025 HIGH This Week

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Business Intelligence

NVD

CVSS 3.1

8.2

EPSS

1.7%

CVE-2021-2024 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

6.5

EPSS

2.2%

CVE-2021-2023 MEDIUM This Month

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Installed Base

NVD

CVSS 3.1

4.7

EPSS

1.1%

CVE-2021-2022 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +3

NVD

CVSS 3.1

4.4

EPSS

1.9%

CVE-2021-2021 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.9

EPSS

10.1%

CVE-2021-2020 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

6.5

EPSS

2.9%

CVE-2021-2019 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

2.7

EPSS

1.6%

CVE-2021-2018 HIGH This Week

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Microsoft Oracle Information Disclosure Advanced Networking Option Adaptive Access Manager +4

NVD

CVSS 3.1

8.3

EPSS

1.4%

CVE-2021-2017 MEDIUM This Month

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Enterprise Data Quality Retail Invoice Matching User Management

NVD

CVSS 3.1

4.3

EPSS

0.9%

CVE-2021-2016 MEDIUM This Month

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.9

EPSS

2.1%

CVE-2021-2015 HIGH This Week

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Data Integrator Enterprise Manager Ops Center Workflow

NVD

CVSS 3.1

8.2

EPSS

1.2%

CVE-2021-2014 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2013 HIGH This Week

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVSS 3.1

7.6

EPSS

1.1%

CVE-2021-2012 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.9

EPSS

2.3%

CVE-2021-2011 MEDIUM This Month

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Oracle MySQL Fedora Active Iq Unified Manager +3

NVD

CVSS 3.1

5.9

EPSS

3.0%

CVE-2021-2010 MEDIUM This Month

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Fedora Active Iq Unified Manager +2

NVD

CVSS 3.1

4.2

EPSS

1.4%

CVE-2021-2009 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.9

EPSS

2.4%

CVE-2021-2007 LOW Monitor

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Oracle Authentication Bypass MySQL Fedora Active Iq Unified Manager +3

NVD

CVSS 3.1

3.7

EPSS

2.3%

CVE-2021-2006 MEDIUM This Month

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL Fedora Active Iq Unified Manager +2

NVD

CVSS 3.1

5.3

EPSS

1.8%

CVE-2021-2005 MEDIUM This Month

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Business Intelligence

NVD

CVSS 3.1

4.7

EPSS

1.4%

CVE-2021-2004 MEDIUM This Month

Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Server Bizlogic Script

NVD

CVSS 3.1

4.3

EPSS

1.0%

CVE-2021-2003 MEDIUM This Month

Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Business Intelligence

NVD

CVSS 3.1

5.4

EPSS

0.7%

CVE-2021-2002 MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Oncommand Insight Oncommand Workflow Automation +2

NVD

CVSS 3.1

4.9

EPSS

2.6%

CVE-2021-2001 MEDIUM This Month

Denial Of Service Oracle MySQL Fedora Oncommand Insight +2

NVD

CVSS 3.1

4.9

EPSS

2.2%

CVE-2021-2000 LOW Monitor

Vulnerability in the Unified Audit component of Oracle Database Server. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Database Server

NVD

CVSS 3.1

2.4

EPSS

0.8%

CVE-2021-1999 MEDIUM This Month

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). Rated medium severity (CVSS 5.0). No vendor patch available.

Oracle Authentication Bypass Enterprise Manager Ops Center Hyperion Infrastructure Technology Zfs Storage Appliance

NVD

CVSS 3.1

5.0

EPSS

0.3%

CVE-2021-1998 LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle MySQL Fedora Active Iq Unified Manager +3

NVD

CVSS 3.1

3.8

EPSS

1.6%

CVE-2021-1997 HIGH This Week

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Hospitality Reporting And Analytics

NVD

CVSS 3.1

8.1

EPSS

1.3%

CVE-2021-1996 LOW Monitor

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Agile Engineering Data Management Hyperion Infrastructure Technology Siebel Ui Framework +1

NVD

CVSS 3.1

2.4

EPSS

1.3%

CVE-2021-1995 MEDIUM This Month

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Weblogic Server

NVD

CVSS 3.1

6.5

EPSS

1.5%

CVE-2021-1994 CRITICAL Act Now

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Oracle Information Disclosure Enterprise Repository Weblogic Server

NVD

CVSS 3.1

9.8

EPSS

5.5%

CVE-2021-1993 MEDIUM This Month

Vulnerability in the Java VM component of Oracle Database Server. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Oracle Java Database Server Enterprise Manager Ops Center +2

NVD

CVSS 3.1

4.8

EPSS

0.8%

CVE-2021-2085

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Crm Technical Foundation

NVD

CVE-2021-2084

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Crm Technical Foundation

NVD

CVE-2021-2083

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Isupport

NVD

CVE-2021-2082

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Istore

NVD

CVE-2021-2081

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2080

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Configurator

NVD

CVE-2021-2079

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Configurator

NVD

CVE-2021-2078

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Configurator

NVD

CVE-2021-2077

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Istore

NVD

CVE-2021-2076

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2075

EPSS 4% CVSS 9.8

CRITICAL Act Now

Oracle Information Disclosure Weblogic Server

NVD

CVE-2021-2074

EPSS 0% CVSS 8.2

HIGH This Week

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

Oracle Information Disclosure Vm Virtualbox

NVD

CVE-2021-2073

EPSS 0% CVSS 4.4

MEDIUM This Month

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Oracle Vm Virtualbox

NVD

CVE-2021-2072

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2071

EPSS 2% CVSS 8.1

HIGH This Week

Elastic Oracle Information Disclosure +1

NVD

CVE-2021-2070

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2069

EPSS 1% CVSS 8.6

HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVE-2021-2068

EPSS 1% CVSS 8.6

HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVE-2021-2067

EPSS 1% CVSS 8.6

HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVE-2021-2066

EPSS 1% CVSS 8.6

HIGH This Week

Denial Of Service Oracle Outside In Technology

NVD

CVE-2021-2065

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2064

EPSS 4% CVSS 9.8

CRITICAL Act Now

Oracle Information Disclosure Weblogic Server

NVD

CVE-2021-2063

EPSS 0% CVSS 8.4

HIGH This Week

Oracle Information Disclosure Peoplesoft Enterprise Peopletools

NVD

CVE-2021-2062

EPSS 1% CVSS 7.6

HIGH This Week

Oracle Authentication Bypass Business Intelligence Publisher

NVD

CVE-2021-2061

EPSS 2% CVSS 4.4

MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2060

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2059

EPSS 1% CVSS 5.3

MEDIUM This Month

Oracle Authentication Bypass Istore

NVD

CVE-2021-2058

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2057

EPSS 1% CVSS 6.3

MEDIUM This Month

Denial Of Service Oracle Retail Customer Management And Segmentation Foundation

NVD

CVE-2021-2056

EPSS 2% CVSS 4.4

MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2055

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2054

EPSS 2% CVSS 7.2

HIGH This Week

Vulnerability in the RDBMS Sharding component of Oracle Database Server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Information Disclosure Rdbms Sharding

NVD

CVE-2021-2052

EPSS 1% CVSS 5.8

MEDIUM This Month

Oracle Authentication Bypass Jd Edwards Enterpriseone Orchestrator

NVD

CVE-2021-2051

EPSS 1% CVSS 7.6

HIGH This Week

Denial Of Service Oracle Authentication Bypass +1

NVD

CVE-2021-2050

EPSS 1% CVSS 7.6

HIGH This Week

Denial Of Service Oracle Authentication Bypass +1

NVD

CVE-2021-2049

EPSS 1% CVSS 7.6

HIGH This Week

Denial Of Service Oracle Authentication Bypass +1

NVD

CVE-2021-2048

EPSS 2% CVSS 5.0

MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2047

EPSS 4% CVSS 9.8

CRITICAL Act Now

Oracle Information Disclosure Weblogic Server

NVD

CVE-2021-2046

EPSS 2% CVSS 6.8

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2045

EPSS 1% CVSS 3.1

LOW Monitor

Vulnerability in the Oracle Text component of Oracle Database Server. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle Text

NVD

CVE-2021-2044

EPSS 1% CVSS 6.5

MEDIUM This Month

Oracle Authentication Bypass Peoplesoft Enterprise Fin Payables

NVD

CVE-2021-2043

EPSS 1% CVSS 6.1

MEDIUM This Month

Oracle Authentication Bypass Peoplesoft Enterprise Peopletools

NVD

CVE-2021-2042

EPSS 0% CVSS 2.3

LOW Monitor

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated low severity (CVSS 2.3), this vulnerability is low attack complexity. No vendor patch available.

Oracle Authentication Bypass MySQL +3

NVD

CVE-2021-2041

EPSS 1% CVSS 8.1

HIGH This Week

Oracle Information Disclosure Business Intelligence

NVD

CVE-2021-2040

EPSS 1% CVSS 6.1

MEDIUM This Month

Oracle Authentication Bypass Argus Safety

NVD

CVE-2021-2039

EPSS 1% CVSS 7.6

HIGH This Week

Oracle Authentication Bypass Siebel Core Server Framework

NVD

CVE-2021-2038

EPSS 2% CVSS 4.4

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2036

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2035

EPSS 1% CVSS 8.8

HIGH This Week

Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Information Disclosure Rdbms Scheduler

NVD

CVE-2021-2034

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Common Applications Calendar

NVD

CVE-2021-2033

EPSS 2% CVSS 4.3

MEDIUM This Month

Denial Of Service Oracle Weblogic Server

NVD

CVE-2021-2032

EPSS 2% CVSS 4.3

MEDIUM This Month

Oracle Authentication Bypass MySQL +4

NVD

CVE-2021-2031

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2030

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2029

EPSS 2% CVSS 9.8

CRITICAL Act Now

Oracle Information Disclosure Scripting

NVD

CVE-2021-2028

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2027

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Marketing

NVD

CVE-2021-2026

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Marketing

NVD

CVE-2021-2025

EPSS 2% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Business Intelligence

NVD

CVE-2021-2024

EPSS 2% CVSS 6.5

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2023

EPSS 1% CVSS 4.7

MEDIUM This Month

Oracle Authentication Bypass Installed Base

NVD

CVE-2021-2022

EPSS 2% CVSS 4.4

MEDIUM This Month

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +5

NVD

CVE-2021-2021

EPSS 10% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2020

EPSS 3% CVSS 6.5

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2019

EPSS 2% CVSS 2.7

LOW Monitor

Oracle Authentication Bypass MySQL +4

NVD

CVE-2021-2018

EPSS 1% CVSS 8.3

HIGH This Week

Microsoft Oracle Information Disclosure +6

NVD

CVE-2021-2017

EPSS 1% CVSS 4.3

MEDIUM This Month

Oracle Authentication Bypass Enterprise Data Quality +2

NVD

CVE-2021-2016

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2015

EPSS 1% CVSS 8.2

HIGH This Week

Oracle Authentication Bypass Data Integrator +2

NVD

CVE-2021-2014

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +3

NVD

CVE-2021-2013

EPSS 1% CVSS 7.6

HIGH This Week

Denial Of Service Oracle Authentication Bypass +1

NVD

CVE-2021-2012

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2011

EPSS 3% CVSS 5.9

MEDIUM This Month

Denial Of Service Oracle MySQL +5

NVD

CVE-2021-2010

EPSS 1% CVSS 4.2

MEDIUM This Month

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated medium severity (CVSS 4.2), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2009

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2007

EPSS 2% CVSS 3.7

LOW Monitor

Oracle Authentication Bypass MySQL +5

NVD

CVE-2021-2006

EPSS 2% CVSS 5.3

MEDIUM This Month

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2005

EPSS 1% CVSS 4.7

MEDIUM This Month

Oracle Authentication Bypass Business Intelligence

NVD

CVE-2021-2004

EPSS 1% CVSS 4.3

MEDIUM This Month

Oracle Authentication Bypass Server Bizlogic Script

NVD

CVE-2021-2003

EPSS 1% CVSS 5.4

MEDIUM This Month

Oracle Authentication Bypass Business Intelligence

NVD

CVE-2021-2002

EPSS 3% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2001

EPSS 2% CVSS 4.9

MEDIUM This Month

Denial Of Service Oracle MySQL +4

NVD

CVE-2021-2000

EPSS 1% CVSS 2.4

LOW Monitor

Vulnerability in the Unified Audit component of Oracle Database Server. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Oracle Authentication Bypass Database Server

NVD

CVE-2021-1999

EPSS 0% CVSS 5.0

MEDIUM This Month

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). Rated medium severity (CVSS 5.0). No vendor patch available.

Oracle Authentication Bypass Enterprise Manager Ops Center +2

NVD

CVE-2021-1998

EPSS 2% CVSS 3.8

LOW Monitor

Denial Of Service Oracle MySQL +5

NVD

CVE-2021-1997

EPSS 1% CVSS 8.1

HIGH This Week

Oracle Authentication Bypass Hospitality Reporting And Analytics

NVD

CVE-2021-1996

EPSS 1% CVSS 2.4

LOW Monitor

Oracle Authentication Bypass Agile Engineering Data Management +3

NVD

CVE-2021-1995

EPSS 1% CVSS 6.5

MEDIUM This Month

Oracle Authentication Bypass Weblogic Server

NVD

CVE-2021-1994

EPSS 5% CVSS 9.8

CRITICAL Act Now

Oracle Information Disclosure Enterprise Repository +1

NVD

CVE-2021-1993

EPSS 1% CVSS 4.8

MEDIUM This Month

Vulnerability in the Java VM component of Oracle Database Server. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Oracle Java +4

NVD

Prev Page 24 of 87 Next