CWE-284 (2661) CWE-79 (1968) CWE-416 (1559) CWE-862 (1268) CWE-122 (1132) CWE-89 (1129) CWE-125 (1089) CWE-22 (1058) CWE-200 (874) CWE-306 (873) CWE-20 (832) CWE-787 (739) CWE-78 (729) CWE-918 (712) CWE-863 (675) CWE-94 (666) CWE-74 (605) CWE-639 (585) CWE-400 (547) CWE-269 (515) CWE-119 (507) CWE-502 (495) CWE-287 (460) CWE-770 (454) CWE-121 (447) CWE-190 (421) CWE-362 (394) CWE-77 (384) CWE-476 (322) CWE-352 (291)

CWE-284

2,661 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-60941 high 8.7 0.0041 2026-07-21 Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (componen
CVE-2026-61078 high 8.7 0.0033 2026-07-21 Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSof
CVE-2026-65759 high 8.7 0.0043 2026-07-23 Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.
CVE-2026-66494 high 8.7 0.0050 2026-08-07 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builde
CVE-2026-60707 high 8.7 0.0041 2026-08-18 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Securit
CVE-2026-60860 high 8.7 0.0036 2026-08-18 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa
CVE-2026-60903 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60934 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60935 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60954 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60980 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60981 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten
CVE-2026-60996 high 8.7 0.0041 2026-08-18 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen
CVE-2026-61193 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime
CVE-2026-61215 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime
CVE-2026-61219 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime
CVE-2026-61332 high 8.7 0.0041 2026-08-18 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C
CVE-2026-62589 high 8.7 0.0034 2026-08-18 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integratio
CVE-2026-62607 high 8.7 0.0041 2026-08-18 Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Op
CVE-2026-70778 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Op
CVE-2026-70900 high 8.7 0.0034 2026-08-18 Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (compon
CVE-2026-70903 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (compon
CVE-2026-71000 high 8.7 0.0033 2026-08-18 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
CVE-2026-71050 high 8.7 0.0041 2026-08-18 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: I
CVE-2026-76596 high 8.7 0.0041 2026-08-22 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.
CVE-2026-76597 high 8.7 0.0044 2026-08-22 Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email p
CVE-2026-76598 high 8.7 0.0046 2026-08-22 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders
CVE-2026-76599 high 8.7 0.0041 2026-08-22 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in
CVE-2026-91437 high 8.7 0.0036 2026-10-20 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru
CVE-2025-8574 high 8.7 0.0037 2026-10-30 The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions
CVE-2026-101431 high 8.7 0.0032 2026-10-20 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test
CVE-2026-83407 high 8.6 0.0034 2026-10-20 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic
CVE-2026-87304 high 8.6 0.0038 2026-10-20 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou
CVE-2026-91212 high 8.6 0.0031 2026-10-20 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen
CVE-2026-91273 high 8.6 0.0038 2026-10-20 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object
CVE-2026-91343 high 8.6 0.0032 2026-10-20 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou
CVE-2026-67073 high 8.6 0.0022 2026-10-28 HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability.
CVE-2026-23899 high 8.6 0.0041 2026-04-01 An improper access check allows unauthorized access to webservice endpoints.
CVE-2026-33031 high 8.6 0.0027 2026-04-20 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user who was di
CVE-2026-46776 high 8.6 0.0037 2026-06-17 Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co
CVE-2026-54407 high 8.6 0.0045 2026-07-02 A malicious actor with access to the network could exploit an Improper Access Control vulnerability
CVE-2026-60536 high 8.6 0.0041 2026-07-21 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen
CVE-2026-60550 high 8.6 0.0041 2026-07-21 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
CVE-2026-60559 high 8.6 0.0041 2026-07-21 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic
CVE-2026-60671 high 8.6 0.0034 2026-07-21 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
CVE-2026-43760 high 8.6 0.0041 2026-07-27 An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma
CVE-2026-59505 high 8.6 0.0039 2026-08-13 : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (develope
CVE-2026-54730 high 8.6 0.0068 2026-08-18 authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google
CVE-2026-60699 high 8.6 0.0041 2026-08-18 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2026-61033 high 8.6 0.0038 2026-08-18 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente