CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

1,643 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-47057	7.5	—	—	—	oracle / jre	Vulnerability in Oracle Java SE (component: Scripting).	46d ago
CVE-2026-47018	7.5	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	46d ago
CVE-2026-46941	7.5	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance).	46d ago
CVE-2026-35287	7.5	—	—	—	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	46d ago
CVE-2026-46974	7.5	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	80d ago
CVE-2026-46971	7.5	—	—	—	oracle / hr intelligence	Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).	80d ago
CVE-2026-46966	7.5	—	—	—	oracle / universal work queue	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site	80d ago
CVE-2026-46959	7.5	—	—	—	oracle / subledger accounting	Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operation	80d ago
CVE-2026-46958	7.5	—	—	—	oracle / subledger accounting	Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Internal Operation	80d ago
CVE-2026-46957	7.5	—	—	—	oracle / isupplier portal	Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).	80d ago
CVE-2026-46955	7.5	—	—	—	oracle / human resources	Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person).	80d ago
CVE-2026-46935	7.5	—	—	—	oracle / complex maintenance repair and overhaul	Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component	80d ago
CVE-2026-46934	7.5	—	—	—	oracle / complex maintenance repair and overhaul	Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component	80d ago
CVE-2026-46873	7.5	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device).	80d ago
CVE-2026-46863	7.5	—	—	—	oracle / mysql cluster	Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).	80d ago
CVE-2026-46862	7.5	—	—	—	oracle / mysql router	Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).	80d ago
CVE-2026-46791	7.5	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	80d ago
CVE-2026-35295	7.5	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	80d ago
CVE-2026-35275	7.5	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders).	80d ago
CVE-2026-35269	7.5	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).	80d ago
CVE-2026-46835	7.5	—	—	—	oracle / database server	Vulnerability in the Net Service component of Oracle Database Server.	100d ago
CVE-2026-46834	7.5	—	—	—	oracle / database server	Vulnerability in the Net Service component of Oracle Database Server.	100d ago
CVE-2026-46829	7.5	—	—	—	oracle / rest data services	Vulnerability in Oracle REST Data Services (component: Mongoapi).	100d ago
CVE-2026-71143	7.4	—	—	—	oracle / communications unified inventory management	Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (componen	18d ago
CVE-2026-71009	7.4	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	18d ago
CVE-2026-70898	7.4	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	18d ago
CVE-2026-70823	7.4	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	18d ago
CVE-2026-70790	7.4	—	—	—	oracle / telecommunications billing integrator	Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: I	18d ago
CVE-2026-70783	7.4	—	—	—	oracle / service contracts	Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70779	7.4	—	—	—	oracle / isupplier portal	Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations).	18d ago
CVE-2026-70734	7.4	—	—	—	oracle / autonomous health framework	Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).	18d ago
CVE-2026-70699	7.4	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	18d ago
CVE-2026-70672	7.4	—	—	—	oracle / reports developer	Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authent	18d ago
CVE-2026-62538	7.4	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	18d ago
CVE-2026-62492	7.4	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Secur	18d ago
CVE-2026-60933	7.4	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	18d ago
CVE-2026-60915	7.4	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	18d ago
CVE-2026-60856	7.4	—	—	—	oracle / peoplesoft enterprise peopletools	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packag	18d ago
CVE-2026-60820	7.4	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).	18d ago
CVE-2026-60803	7.4	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	18d ago
CVE-2026-60797	7.4	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).	18d ago
CVE-2026-60792	7.4	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).	18d ago
CVE-2026-60766	7.4	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).	18d ago
CVE-2026-61234	7.4	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ePro	46d ago
CVE-2026-61210	7.4	—	—	—	oracle / peoplesoft enterprise scm manufacturing	Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security).	46d ago
CVE-2026-61185	7.4	—	—	—	oracle / agile product lifecycle management for process	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (compone	46d ago
CVE-2026-61173	7.4	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	46d ago
CVE-2026-61164	7.4	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	46d ago
CVE-2026-61135	7.4	—	—	—	oracle / commerce platform	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)	46d ago
CVE-2026-61113	7.4	—	—	—	oracle / application object library	Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).	46d ago
CVE-2026-60827	7.4	—	—	—	oracle / isupport	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60823	7.4	—	—	—	oracle / isupport	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations).	46d ago
CVE-2026-60725	7.4	—	—	—	oracle / mysql router	Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).	46d ago
CVE-2026-60667	7.4	—	—	—	oracle / peoplesoft enterprise hcm human resources	Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core).	46d ago
CVE-2026-60317	7.4	—	—	—	oracle / mysql connector\/net	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).	46d ago
CVE-2026-60179	7.4	—	—	—	oracle / mysql connector\/c\+\+	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++).	46d ago
CVE-2026-47058	7.4	—	—	—	oracle / jre	Vulnerability in Oracle Java SE (component: Scripting).	46d ago
CVE-2026-47050	7.4	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	46d ago
CVE-2026-47026	7.4	—	—	—	oracle / peoplesoft enterprise peopletools	Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboa	46d ago
CVE-2026-46943	7.4	—	—	—	oracle / retail eftlink	Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin).	46d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, four independent catalogues); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker