CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-30737

CVE-2025-30737 affects Oracle Smart View for Office (Core Smart View) and is documented for version 24.200. The vulnerability enables a high-privileged attacker, with network access via HTTP, to compromise the product. Exploitation requires user interaction from a person other than the attacker, ...

CVE-2025-30732

The CVE refers to Oracle E-Business Suite, Oracle Application Object Library (AOL) Core, affected in 12.2.3–12.2.14. An unauthenticated attacker with network access via HTTP can compromise AOL, with human interaction required, potentially enabling unauthorized update/insert/delete and read access...

CVE-2025-30729

The CVE-2025-30729 vulnerability affects Oracle Communications Order and Service Management (OC OSM) in Oracle Communications Applications, specifically versions 7.4.0–7.5.0. An attacker with network access via HTTP and low privileges can exploit it, with user interaction required, to cause unaut...

CVE-2025-30727

...

CVE-2025-30725

...

CVE-2025-30726

...

CVE-2025-30722

...

CVE-2025-30724

...

CVE-2025-30720

...

CVE-2025-30721

...

CVE-2025-30719

...

CVE-2025-30719

...

CVE-2025-30716

CVE-2025-30716 affects Oracle E-Business Suite, specifically the CRM User Management Framework in the Common Applications component. Affected versions are 12.2.3–12.2.14; the vulnerability is exploitable by an unauthenticated attacker over HTTP, potentially giving unauthorized access to sensitive...

CVE-2025-30717

Oracle E‑Business Suite Teleservice (Service Diagnostics Scripts) is affected in 12.2.3–12.2.14. CVE-2025-30717 describes a low‑privileged, network‑accessible (HTTP) flaw that can lead to unauthorized data access or full access to Teleservice. CVSS v3.1 base score 6.5 (Confidentiality impact). Co...

CVE-2025-30716

...

CVE-2025-30711

CVE-2025-30711 affects Oracle E-Business Suite, Oracle Applications Framework (Attachments, File Upload). Affected: 12.2.3–12.2.14. Vulnerability allows a low-privileged attacker with network access via HTTP to compromise the framework, with human interaction required. Impact per sources: unautho...

CVE-2025-30708

...

CVE-2025-30706

CVE-2025-30706 — Oracle MySQL Connectors (Connector/J) is a vulnerability affecting MySQL Connector/J in Oracle MySQL, with affected versions 9.0.0–9.2.0. The issue allows a low-privilege, network-based attacker to take over the Connector/J component through multiple protocols. It is rated CVSS 3...