Oracle Corp. Oracle Linux

Name: Oracle Corp. Oracle Linux
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical13high8medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-5211US	medium5.0	97.5% (100th)	Exploit	no fix	2014-01-02	2 versions
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	≤ 5
CVE-2016-0777US	medium6.5	63.5% (99th)	Exploit	no fix	2016-01-14	≤ 7
CVE-2015-5600US	high8.5	9.38% (95th)	Exploit	no fix	2015-08-03	3 versions
CVE-2022-22822US	critical9.8	5.10% (92nd)	Exploit	no fix	2022-01-10	2 versions
CVE-2024-22017US	—	0.89% (59th)	Exploit	no fix	2024-03-19	2 versions
CVE-2021-3656US	high8.8OT high	0.66% (51st)	Exploit	no fix	2022-03-04	2 versions
CVE-2026-46243US	—OT elevated	0.41% (35th)	Exploit	no fix	2026-06-01	2 versions
CVE-2016-0778US	high8.1	20.9% (98th)	—	no fix	2016-01-14	≤ 7
CVE-2019-11730US	medium6.5	20.3% (97th)	—	no fix	2019-07-23	3 versions
CVE-2019-1002100US	medium6.5	16.9% (97th)	—	no fix	2019-04-01	≤ 7
CVE-2021-25215US	high7.5	11.8% (96th)	—	no fix	2021-04-29	3 versions
CVE-2023-3446US	medium5.3	6.53% (94th)	—	no fix	2023-07-19	≤ 8
CVE-2015-8391US	critical9.8	6.40% (94th)	—	no fix	2015-12-02	≤ 7
CVE-2020-8201US	high7.4	5.30% (93rd)	—	no fix	2020-09-18	≤ 8
CVE-2015-5352US	medium4.3	4.52% (91st)	—	no fix	2015-08-03	≤ 6
CVE-2019-3900US	high7.7	4.35% (91st)	—	no fix	2019-04-25	3 versions
CVE-2018-20650US	medium6.5	2.58% (85th)	—	no fix	2019-01-01	4 versions
CVE-2019-9499US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	4 versions
CVE-2023-5679US	—	1.29% (70th)	—	no fix	2024-02-13	2 versions
CVE-2024-21891US	high8.8	1.24% (69th)	—	no fix	2024-02-20	2 versions
CVE-2023-39976US	critical9.8	1.18% (68th)	—	no fix	2023-08-08	≤ 9
CVE-2020-2732US	medium6.8	0.93% (60th)	—	no fix	2020-04-08	2 versions
CVE-2022-28289US	high8.8	0.74% (54th)	—	no fix	2022-12-22	2 versions
CVE-2019-14835US	high7.8	0.62% (50th)	—	no fix	2019-09-17	3 versions
CVE-2018-16877US	high7.8	0.38% (32nd)	—	no fix	2019-04-18	≤ 8 (poppler)
CVE-2024-27397US	high7.0	0.26% (18th)	—	no fix	2024-05-14	≤ 8
CVE-2024-26808US	—	0.26% (17th)	—	no fix	2024-04-04	≤ 9
CVE-2023-22024US	—	0.18% (7th)	—	no fix	2023-09-20	4 versions

showing 29 of 30

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-264CWE-2644 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-617Reachable Assertion3 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan