Oracle Construction and Engineering

Name: Oracle Construction and Engineering
Brand: Oracle

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

11critical4high1medium0low

updated 2026-10-27

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	≤ vers:unknown/*
CVE-2025-52999US	—	0.77% (55th)	Exploit	no fix	2025-06-25	10 versions
CVE-2021-43113US	critical9.8	5.42% (93rd)	—	no fix	2021-12-15	10 versions
CVE-2026-64193US	—	1.44% (73rd)	—	no fix	2026-07-20	≤ vers:unknown/*
CVE-2026-63639US	—	1.17% (67th)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2024-21742US	medium5.3	1.09% (65th)	—	no fix	2024-02-27	8 versions
CVE-2026-58389US	high7.5	1.03% (64th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-84939US	—	0.85% (58th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2025-48795US	—	0.73% (54th)	—	no fix	2025-07-15	10 versions
CVE-2026-61674US	—	0.72% (54th)	—	no fix	2026-09-21	≤ vers:unknown/*
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	≤ vers:unknown/*
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	≤ vers:unknown/*
CVE-2026-39892US	critical9.8	0.65% (51st)	—	no fix	2026-04-08	≤ vers:unknown/*
CVE-2026-10050US	critical9.1	0.63% (50th)	—	no fix	2026-08-04	≤ vers:unknown/*
CVE-2026-58016US	critical9.1	0.55% (46th)	—	no fix	2026-06-30	≤ vers:unknown/*
CVE-2024-21095US	—	0.53% (44th)	—	no fix	2024-04-16	12 versions
CVE-2026-5450US	—	0.50% (43rd)	—	no fix	2026-04-20	≤ vers:unknown/*
CVE-2026-101763US	critical9.8OT elevated	0.50% (43rd)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-13221US	critical9.1	0.49% (42nd)	—	no fix	2026-07-13	≤ vers:unknown/*
CVE-2026-68525US	—OT elevated	0.49% (42nd)	—	no fix	2026-08-25	≤ vers:unknown/*
CVE-2024-49771US	—	0.48% (41st)	—	no fix	2024-10-28	9 versions
CVE-2026-86219US	—OT elevated	0.47% (40th)	—	no fix	2026-09-06	≤ vers:unknown/*
CVE-2026-32327US	—	0.46% (40th)	—	no fix	2026-08-06	≤ vers:unknown/*
CVE-2026-78030US	—	0.42% (36th)	—	no fix	2026-09-19	≤ vers:unknown/*
CVE-2026-101765US	critical9.1OT elevated	0.42% (36th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-75596US	high7.5	0.37% (31st)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-101758US	high8.2	0.36% (29th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-6653US	critical9.8	0.36% (29th)	—	no fix	2026-06-22	≤ vers:unknown/*
CVE-2026-101791US	high8.1	0.33% (26th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-75595US	critical9.1	0.32% (24th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-56130US	—OT elevated	0.30% (22nd)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2025-21558US	—OT elevated	0.26% (18th)	—	no fix	2025-01-21	8 versions
CVE-2024-23944US	—OT elevated	0.25% (16th)	—	no fix	2024-03-15	8 versions
CVE-2025-50061US	—	0.22% (13th)	—	no fix	2025-07-15	10 versions
CVE-2025-21528US	—	0.21% (12th)	—	no fix	2025-01-21	8 versions
CVE-2026-13321US	—	0.21% (11th)	—	no fix	2026-07-22	≤ vers:unknown/*
CVE-2025-21526US	—	0.19% (9th)	—	no fix	2025-01-21	8 versions
CVE-2026-54906US	critical9.8	0.16% (5th)	—	no fix	2026-06-24	≤ vers:unknown/*
CVE-2026-63388US	—	0.14% (3rd)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-21716US	—OT elevated	0.14% (3rd)	—	no fix	2026-03-30	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-416Use After Free3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-294Authentication Bypass by Capture-replay2 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)29 CVEs
DECERT-Bund (BSI CSAF)11 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan