Lucene search
+L

210 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2026/08/24 12:00 a.m.9 views

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

10CVSS5.3AI score0.4202EPSS
SaveIn wildExploits4
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.10 views

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

10CVSS7.1AI score0.00508EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.28 views

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

10CVSS7.1AI score0.00508EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/22 12:31 a.m.13 views

EUVD-2026-46892

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modhttp2.so. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromis...

7.8CVSS7.3AI score0.00161EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.12 views

EUVD-2026-46849

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to...

7.8CVSS7.2AI score0.00161EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.14 views

EUVD-2026-46835

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modssl. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

9.1CVSS7.1AI score0.00425EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.12 views

EUVD-2026-46829

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modproxy. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Whil...

8.6CVSS7.2AI score0.00437EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.11 views

EUVD-2026-46777

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Apache Plugin. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

9.8CVSS7.2AI score0.00508EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 10:17 p.m.11 views

CVE-2026-60530

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modhttp2.so. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromis...

7.8CVSS0.00161EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.13 views

CVE-2026-60438

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modssl. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

9.1CVSS0.00425EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.8 views

CVE-2026-60431

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modproxy. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Whil...

8.6CVSS0.00437EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.7 views

CVE-2026-60363

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Apache Plugin. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

9.8CVSS0.00508EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.15 views

PT-2026-62572

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 14.1.2.0.0 Description A flaw exists in the mod http2.so component of the Oracle HTTP Server within Oracle Fusion Middleware. A low-privileged attacker with access to the infrastructure where the server executes can...

7.8CVSS7.2AI score0.00161EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.10 views

PT-2026-62529

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 12.2.1.4.0 Oracle HTTP Server versions 14.1.2.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with access to the infrastructure where the server executes to...

7.8CVSS7.1AI score0.00161EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/05 7:22 p.m.19 views

CVE-2026-34291

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. While...

8.7CVSS7.4AI score0.00261EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:00 a.m.82 views

Oracle HTTP Server (April 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and...

8.7CVSS6.7AI score0.01515EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:00 a.m.17 views

Oracle HTTP Server (April 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and...

8.7CVSS6.7AI score0.01515EPSS
SaveExploits3References15
NVD
NVD
added 2026/04/21 9:16 p.m.15 views

CVE-2026-34291

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. While...

8.7CVSS0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/21 12:00 a.m.13 views

Oracle HTTP Server 安全漏洞

Oracle HTTP Server is a web server component of Oracle’s Fusion Middleware, developed by Oracle Corporation in the United States. Versions 12.2.1.4.0 and 14.1.2.0.0.0 of Oracle HTTP Server contain security vulnerabilities. These vulnerabilities stem from issues with Core components, which may all...

8.7CVSS7.2AI score0.00261EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/03/08 7:20 a.m.185 views

Exploit for Improper Access Control in Oracle Http_Server

!Type: CVEhttps://img.shields.io/badge/Type-CVE-critical?styl...

10CVSS7.4AI score0.4202EPSS
SaveExploits4
Rows per page
Query Builder