Oracle vulnerabilities

Latest Oracle vulnerabilities

• 10.0 High severity

  Oracle Java SE Unspecified Exploited

  CVE-2013-2465Jun 18, 2013OracleEPSS 98.8%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availa

• 4.3 Medium severity

  Oracle JRE Unspecified Exploited

  CVE-2013-2423Apr 17, 2013OracleEPSS 85.2%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the A

• 5.0 Medium severity

  Oracle JRE Sandbox Bypass Exploited

  CVE-2013-0431Jan 31, 2013OracleEPSS 90.1%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a

• 10.0 High severity

  Oracle JRE Remote Code Execution Exploited

  CVE-2013-0422Jan 10, 2013OracleEPSS 97.1%

  Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrie

• 9.1 Critical severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-3152Oct 16, 2012OracleEPSS 98.8%

  Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the p

• 4.7 Medium severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-0518Oct 16, 2012OracleEPSS 4.69%

  Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

• 10.0 High severity

  Oracle Java SE Sandbox Bypass Exploited

  CVE-2012-5076Oct 16, 2012OracleEPSS 91.3%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

• 9.8 Critical severity

  Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Exploited

  CVE-2012-4681Aug 28, 2012OracleEPSS 98.5%

  Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder

• 10.0 High severity

  Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Exploited

  CVE-2012-1723Jun 16, 2012OracleEPSS 93.6%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and ava

• 9.8 Critical severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-1710May 3, 2012OracleEPSS 7.83%

  Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability

• 9.8 Critical severity

  Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Exploited

  CVE-2011-3544Oct 19, 2011OracleEPSS 96.7%

  Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabilit

• 9.8 Critical severity

  Oracle JRE Unspecified Exploited

  CVE-2010-0840Apr 1, 2010OracleEPSS 96.3%

  Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the p

• 7.8 High severity

  Adobe Reader and Acrobat Input Validation Exploited

  CVE-2008-2992Nov 4, 2008AdobeEPSS 99.8%

  Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

• 8.8 High severity

  Oracle VirtualBox Insufficient Input Validation Exploited

  CVE-2008-3431Aug 5, 2008OracleEPSS 6.88%

  The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by