Oracle: ثغرات مُستغلّة
- 46ثغرة مُستغلّة
- 13تستخدمها برامج الفدية
- 24/08/2026آخر ما أُضيف
- WebLogic Server 12
- Java SE 7
- Fusion Middleware 6
- E-Business Suite 4
- Java Runtime Environment (JRE) 4
- Agile Product Lifecycle Management (PLM) 2
- HTTP Server and Oracle Weblogic Server Proxy Plug-in 1
- PeopleSoft Enterprise PeopleTools 1
- ADF Faces 1
- Java SE and JRockit 1
- Solaris 1
- BI Publisher (Formerly XML Publisher) 1
- Java SE JDK and JRE 1
- VirtualBox 1
- Intelligence Enterprise Edition 1
- Multiple Products 1
- Solaris and Zettabyte File System (ZFS) 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 24/08/2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | حرجة 10.0 | 73% |
| 15/07/2026 | Improper Privilege Management | E-Business Suite | حرجة 9.8 | 12% |
| 12/06/2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | حرجة 9.8 | 97% |
| 01/06/2026 | Unspecified | WebLogic Server | مرتفع 7.5 | 74% |
| 21/11/2025 | Missing Authentication for Critical Function | Fusion Middleware | حرجة 9.8 | 89% |
| 20/10/2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | مرتفع 7.5 | 96% |
| 06/10/2025 | Unspecified | E-Business Suite | حرجة 9.8 | 99.7% |
| 24/02/2025 | Deserialization | Agile Product Lifecycle Management (PLM) | مرتفع 8.8 | 3.9% |
| 07/01/2025 | Unspecified | WebLogic Server | حرجة 9.8 | 95% |
| 21/11/2024 | Incorrect Authorization | Agile Product Lifecycle Management (PLM) | مرتفع 7.5 | 1.7% |
| 18/09/2024 | Deserialization of Untrusted Data | ADF Faces | حرجة 9.8 | 62% |
| 18/09/2024 | Remote Code Execution | WebLogic Server | حرجة 9.8 | 95% |
| 03/06/2024 | OS Command Injection | WebLogic Server | مرتفع 7.4 | 96% |
| 16/11/2023 | Unspecified | Fusion Middleware | حرجة 9.8 | 93% |
| 12/05/2023 | Unspecified | Java SE and JRockit | حرجة 9.8 | 92% |
| 01/05/2023 | Unspecified | WebLogic Server | مرتفع 7.5 | 99.9% |
| 02/02/2023 | Unspecified | E-Business Suite | حرجة 9.8 | 98% |
| 28/11/2022 | Unspecified | Fusion Middleware | حرجة 9.8 | 96% |
| 08/09/2022 | Unspecified | WebLogic Server | حرجة 9.8 | >99.9% |
| 25/05/2022 | Privilege Escalation | Solaris | مرتفع 8.8 | 13% |
| 25/05/2022 | JRE Unspecified | Java Runtime Environment (JRE) | منخفضة 3.7 | 85% |
| 25/05/2022 | JRE Sandbox Bypass | Java Runtime Environment (JRE) | منخفضة 3.7 | 90% |
| 25/05/2022 | JRE Remote Code Execution | Java Runtime Environment (JRE) | حرجة 9.8 | 97% |
| 25/05/2022 | Unspecified | Fusion Middleware | حرجة 9.8 | 7.8% |
| 25/05/2022 | JRE Unspecified | Java Runtime Environment (JRE) | حرجة 9.8 | 96% |
| 28/03/2022 | Unspecified | Java SE | حرجة 9.8 | 99% |
| 28/03/2022 | Sandbox Bypass | Java SE | حرجة 9.8 | 91% |
| 28/03/2022 | Unspecified | Fusion Middleware | متوسطة 4.7 | 4.7% |
| 25/03/2022 | BI Publisher Unauthorized Access | BI Publisher (Formerly XML Publisher) | مرتفع 7.2 | 92% |
| 03/03/2022 | Integrity Check | Java SE | متوسطة 5.3 | 14% |
| 03/03/2022 | and Java SE Embedded Remote Code Execution | Java SE | حرجة 9.8 | 25% |
| 03/03/2022 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | حرجة 9.8 | 99% |
| 03/03/2022 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | حرجة 9.8 | 94% |
| 03/03/2022 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | حرجة 9.8 | 98% |
| 03/03/2022 | Java SE Runtime Environment (JRE) Arbitrary Code Execution | Java SE JDK and JRE | حرجة 9.8 | 97% |
| 03/03/2022 | Insufficient Input Validation | VirtualBox | مرتفع 8.8 | 6.9% |
| 10/02/2022 | Corporation WebLogic Server Remote Code Execution | WebLogic Server | مرتفع 7.5 | >99.9% |
| 18/01/2022 | Business Intelligence Enterprise Edition Path Transversal | Intelligence Enterprise Edition | مرتفع 7.5 | 97% |
| 10/01/2022 | WebLogic Server, Injection | WebLogic Server | مرتفع 7.5 | >99.9% |
| 03/11/2021 | Remote Code Execution | Multiple Products | حرجة 9.8 | 97% |
| 03/11/2021 | Unspecified | WebLogic Server | مرتفع 7.2 | 98% |
| 03/11/2021 | Remote Code Execution | WebLogic Server | حرجة 9.8 | >99.9% |
| 03/11/2021 | Unspecified | Solaris and Zettabyte File System (ZFS) | حرجة 10.0 | 80% |
| 03/11/2021 | Remote Code Execution | WebLogic Server | حرجة 9.8 | 99.2% |
| 03/11/2021 | Deserialization of Untrusted Data | WebLogic Server | حرجة 9.8 | 95% |
| 03/11/2021 | Unspecified | Fusion Middleware | حرجة 9.1 | 99% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.