Oracle Corporation Application Object Library

Name: Oracle Corporation Application Object Library
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical4high15medium1low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-10246US	high8.2	13.9% (97th)	Exploit	no fix	2017-08-08	5 versions
CVE-2017-10328US	high7.5	2.53% (85th)	—	no fix	2017-10-19	6 versions
CVE-2017-3556US	medium5.3	2.11% (82nd)	—	no fix	2017-04-24	5 versions
CVE-2018-2804US	high7.4	2.00% (81st)	—	no fix	2018-04-19	6 versions
CVE-2017-10331US	medium5.3	1.98% (80th)	—	no fix	2017-10-19	6 versions
CVE-2017-10244US	medium5.3	1.98% (80th)	—	no fix	2017-08-08	5 versions
CVE-2017-10177US	high8.1	1.95% (80th)	—	no fix	2017-08-08	≤ 12.2.6
CVE-2018-2867US	medium5.3	1.94% (80th)	—	no fix	2018-04-19	6 versions
CVE-2018-2864US	medium5.3	1.94% (80th)	—	no fix	2018-04-19	6 versions
CVE-2018-3244US	medium5.3	1.94% (80th)	—	no fix	2018-10-17	6 versions
CVE-2018-2934US	medium5.3	1.94% (80th)	—	no fix	2018-07-18	≤ 12.1.3
CVE-2019-3027US	medium5.3	1.56% (75th)	—	no fix	2019-10-16	≤ 12.2.5-12.2.9
CVE-2020-14635US	medium5.3	1.21% (68th)	—	no fix	2020-07-15	≤ 12.2.5-12.2.9
CVE-2018-2635US	medium4.8	1.12% (66th)	—	no fix	2018-01-18	6 versions
CVE-2019-2761US	low3.7	1.10% (66th)	—	no fix	2019-07-23	2 versions
CVE-2019-2621US	medium4.7	1.04% (64th)	—	no fix	2019-04-23	7 versions
CVE-2021-2314US	medium5.5	0.99% (62nd)	—	no fix	2021-04-22	2 versions
CVE-2020-14554US	medium4.7	0.98% (62nd)	—	no fix	2020-07-15	2 versions
CVE-2020-14840US	medium4.3	0.98% (62nd)	—	no fix	2020-10-21	2 versions
CVE-2024-20915US	—	0.49% (42nd)	—	no fix	2024-02-17	≤ 12.2.3 ≤12.2.13
CVE-2018-2874US	medium4.3	0.49% (42nd)	—	no fix	2018-04-19	≤ 12.1.3
CVE-2023-21978US	—	0.38% (31st)	—	no fix	2023-04-18	≤ 12.2.3-12.2.11
CVE-2024-20929US	—	0.32% (25th)	—	no fix	2024-02-17	≤ 12.2.3 ≤12.2.13
CVE-2024-21128US	—	0.31% (24th)	—	no fix	2024-07-16	≤ 12.2.6 ≤12.2.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-264CWE-2642 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan