CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-70955	7.5	—	—	—	oracle / commerce platform	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)	71d ago
CVE-2026-70947	7.5	—	—	—	oracle / purchasing	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).	71d ago
CVE-2026-70946	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70937	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70930	7.5	—	—	—	oracle / order management	Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Too	71d ago
CVE-2026-70927	7.5	—	—	—	oracle / workflow	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).	71d ago
CVE-2026-70910	7.5	—	—	—	—	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).	71d ago
CVE-2026-70908	7.5	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	71d ago
CVE-2026-70906	7.5	—	—	—	—	Vulnerability in Oracle Java SE (component: 2D).	71d ago
CVE-2026-70896	7.5	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70891	7.5	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70890	7.5	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70889	7.5	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70875	7.5	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	71d ago
CVE-2026-70865	7.5	—	—	—	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	71d ago
CVE-2026-70856	7.5	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).	71d ago
CVE-2026-70832	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70829	7.5	—	—	—	oracle / process manufacturing systems	Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal	71d ago
CVE-2026-70822	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	71d ago
CVE-2026-70810	7.5	—	—	—	oracle / scripting	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70799	7.5	—	—	—	oracle / service delivery platform number portability	Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operati	71d ago
CVE-2026-70777	7.5	—	—	—	oracle / isupplier portal	Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70772	7.5	—	—	—	oracle / warehouse management	Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operation	71d ago
CVE-2026-70763	7.5	—	—	—	oracle / operations intelligence	Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Business	71d ago
CVE-2026-70752	7.5	—	—	—	oracle / hyperion financial reporting	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	71d ago
CVE-2026-70724	7.5	—	—	—	oracle / mysql cluster	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).	71d ago
CVE-2026-70713	7.5	—	—	—	oracle / isetup	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform,	71d ago
CVE-2026-70706	7.5	—	—	—	oracle / sales	Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70700	7.5	—	—	—	oracle / payables	Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-70696	7.5	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	71d ago
CVE-2026-70691	7.5	—	—	—	oracle / agile engineering data management	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineeri	71d ago
CVE-2026-70681	7.5	—	—	—	oracle / applications dba	Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java uti	71d ago
CVE-2026-62554	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-62552	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-62550	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-62545	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	71d ago
CVE-2026-62481	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Event	71d ago
CVE-2026-61007	7.5	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	71d ago
CVE-2026-60993	7.5	—	—	—	oracle / identity manager connector	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).	71d ago
CVE-2026-60975	7.5	—	—	—	oracle / peoplesoft enterprise peopletools	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).	71d ago
CVE-2026-60956	7.5	—	—	—	oracle / jd edwards enterpriseone us payroll	Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll).	71d ago
CVE-2026-60914	7.5	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	71d ago
CVE-2026-60906	7.5	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	71d ago
CVE-2026-60889	7.5	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	71d ago
CVE-2026-60850	7.5	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	71d ago
CVE-2026-60808	7.5	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).	71d ago
CVE-2026-60769	7.5	—	—	—	oracle / general ledger	Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).	71d ago
CVE-2026-60765	7.5	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	71d ago
CVE-2026-60679	7.5	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	71d ago
CVE-2026-60590	7.5	—	—	—	oracle / hospitality simphony	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS)	71d ago
CVE-2026-60393	7.5	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Ma	71d ago
CVE-2026-60391	7.5	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	71d ago
CVE-2026-75936	7.5	—	—	—	—	Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.	71d ago
CVE-2026-75935	7.5	—	—	—	—	Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote	71d ago
CVE-2026-71676	7.5	—	—	—	—	Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS	71d ago
CVE-2026-71675	7.5	—	—	—	—	An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() funct	71d ago
CVE-2026-52829	7.5	—	—	—	—	ZEBRA is a Zcash node written entirely in Rust.	71d ago
CVE-2026-52481	7.5	—	—	—	—	An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information	71d ago
CVE-2026-47629	7.5	—	—	—	nvidia / triton inference server	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input val	71d ago
CVE-2026-47628	7.5	—	—	—	nvidia / triton inference server	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of r	71d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker