CVE-2026-34291

CVE-2026-34291 affects the Oracle Fusion Middleware Oracle HTTP Server (Core) with compromised versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker who can reach the server over HTTP to gain access that could lead to unauthorized creation, deletion or modificat...

CVE-2026-34289

...

CVE-2026-34289

CVE-2026-34289 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector (component: Core) with an affected version of 12.2.1.4.0. The entry states a vulnerability that is exploitable without authentication over HTTPS by a network-accessible attacker, potentially leadin...

CVE-2026-34287

CVE-2026-34287 affects Oracle Fusion Middleware > Oracle Identity Manager Connector (Core) with version 12.2.1.4.0. An unauthenticated, network-accessible attacker over HTTPS can compromise data by creating/deleting/modifying critical data or gaining complete access to Oracle Identity Manager ...

CVE-2026-34285

...

CVE-2026-34282

Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition are affected (Networking component) with multiple supported versions listed. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a hang or frequent crash (DOS) of the...

CVE-2026-34281

...

CVE-2026-34277

...

CVE-2026-34275

...

CVE-2026-34272

...

CVE-2026-34272

The CVE denotes a vulnerability in Oracle MySQL Server, specifically in the Server: Optimizer component, affecting versions 9.0.0–9.6.0. The issue can be exploited by a network-accessible, low-privileged attacker and may cause the MySQL Server to hang or crash (complete DoS); the CVSS base score ...

CVE-2026-34273

...

CVE-2026-34269

...

CVE-2026-34268

...

CVE-2026-34267

CVE-2026-34267 affects Oracle MySQL Server (Component: Server: Optimizer) on versions 8.0.0–8.0.45. An attacker with NETWORK access and high privileges, using multiple protocols, can cause a hang or repeatable crash (DoS). CVSS v3.1 base score 4.9 (Availability). No exploit details or remediation...

CVE-2026-34267

...

CVE-2026-22017

The CVE-2026-22017 entry concerns Oracle MySQL Server (component: Server: Optimizer). Affected are MySQL Server versions 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability is exploitable with network access via multiple protocols and can, per the description, allow a low-privilege atta...

CVE-2026-22015

...

CVE-2026-22010

CVE-2026-22010 affects Oracle Financial Services Analytical Applications Infrastructure (Platform component) in Oracle Financial Services Applications. Affected versions are 8.0.7.9, 8.0.8.7, and 8.1.2.5. The vulnerability allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-22009

CVE-2026-22009 affects Oracle MySQL Server (Optimizer) on multiple branches: MySQL 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability enables a low-privilege, network-accessing attacker to trigger a hang or frequent crashes (complete denial of service) in the server. Public details rep...