oracle isupport

Name: oracle isupport
Brand: oracle

productUS

cpe:2.3:a:oracle:isupport:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical16high6medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-10174US	high8.2	1.93% (80th)	—	no fix	2017-08-08	7 versions
CVE-2017-10415US	high8.2	1.64% (76th)	—	no fix	2017-10-19	8 versions
CVE-2017-3369US	high8.2	1.55% (75th)	—	no fix	2017-01-27	3 versions
CVE-2017-3370US	high8.2	1.41% (73rd)	—	no fix	2017-01-27	3 versions
CVE-2017-10175US	medium4.3	1.40% (72nd)	—	no fix	2017-08-08	7 versions
CVE-2020-2878US	high8.2	1.31% (71st)	—	no fix	2020-04-15	12.1.1 → 12.1.3
CVE-2020-2872US	high8.2	1.31% (71st)	—	no fix	2020-04-15	12.1.1 → 12.1.3
CVE-2020-2855US	high8.2	1.31% (71st)	—	no fix	2020-04-15	12.1.1 → 12.1.3
CVE-2020-2843US	high8.2	1.31% (71st)	—	no fix	2020-04-15	12.1.1 → 12.1.3
CVE-2020-2815US	high8.2	1.31% (71st)	—	no fix	2020-04-15	12.1.1 → 12.1.3
CVE-2020-2665US	high8.2	1.31% (71st)	—	no fix	2020-01-15	2 versions
CVE-2020-2662US	high8.2	1.31% (71st)	—	no fix	2020-01-15	2 versions
CVE-2020-2661US	high8.2	1.31% (71st)	—	no fix	2020-01-15	2 versions
CVE-2020-2658US	high8.2	1.31% (71st)	—	no fix	2020-01-15	2 versions
CVE-2019-2829US	high8.2	1.31% (71st)	—	no fix	2019-07-23	2 versions
CVE-2020-14686US	high8.2	1.26% (69th)	—	no fix	2020-07-15	2 versions
CVE-2017-3371US	high8.2	1.24% (69th)	—	no fix	2017-01-27	3 versions
CVE-2021-2097US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	2 versions
CVE-2021-2083US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	2 versions
CVE-2020-2668US	medium4.7	1.04% (64th)	—	no fix	2020-01-15	2 versions
CVE-2020-2667US	medium4.7	1.04% (64th)	—	no fix	2020-01-15	2 versions
CVE-2020-2789US	medium4.7	1.00% (63rd)	—	no fix	2020-04-15	2 versions
CVE-2026-46946US	—	0.46% (40th)	—	12.2.15	2026-06-17	12.2.3 → 12.2.15
CVE-2026-46945US	—	0.46% (40th)	—	12.2.15	2026-06-17	12.2.3 → 12.2.15
CVE-2026-46944US	—	0.45% (39th)	—	12.2.15	2026-06-17	12.2.3 → 12.2.15
CVE-2026-60826US	—	0.38% (31st)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60825US	—	0.38% (31st)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60824US	—	0.35% (29th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60823US	—	0.34% (27th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60827US	—	0.32% (25th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-61257US	—	0.23% (14th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2024-20944US	—	0.16% (5th)	—	no fix	2024-01-16	12.2.3 → 12.2.13

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control17 CVEs
CWE-287Improper Authentication5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-264CWE-2644 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan