Oracle Oracle Application Development Framework (ADF)

Name: Oracle Oracle Application Development Framework (ADF)
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-27

vulnerabilities (106)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-35300US	—	0.56% (47th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46807US	—OT elevated	0.52% (44th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46774US	—	0.52% (44th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46773US	—	0.52% (44th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35312US	—	0.52% (44th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35268US	—	0.52% (44th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35270US	—	0.50% (42nd)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46801US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46800US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46798US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46797US	—	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46783US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35319US	—	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35310US	—	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35301US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35296US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35293US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35292US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35286US	—OT elevated	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35281US	—	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35280US	—	0.48% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46845US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46803US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35308US	—	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35307US	—	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35304US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46813US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46799US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46781US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46778US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46766US	—	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35309US	—	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35298US	—	0.46% (40th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46769US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35326US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35267US	—OT elevated	0.44% (38th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35265US	—OT elevated	0.44% (38th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46777US	—	0.43% (38th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46794US	—	0.43% (37th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46784US	—	0.43% (37th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46789US	—OT elevated	0.42% (36th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46791US	—	0.41% (36th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46847US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46838US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35325US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35323US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35322US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35321US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35317US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-35316US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*

showing 50 of 106

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control67 CVEs
CWE-306Missing Authentication for Critical Function25 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')5 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)106 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan