U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
Icon for NVD Communications and Status Updates Page
Communications Page
The NVD now supports CVSS version 4.0!
CVSS v4.0 Support
The letters N V D typed out in binary
2.0 APIs

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics.

For information on how to cite the NVD, including the database's Digital Object Identifier (DOI), please consult NIST's Public Data Repository.

Last 20 Scored Vulnerability IDs & Summaries CVSS Severity

  • CVE-2026-60773 - Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acc... read CVE-2026-60773
    Published: July 21, 2026; 6:18:16 PM -0400

  • CVE-2026-60671 - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unaut... read CVE-2026-60671
    Published: July 21, 2026; 6:18:08 PM -0400

  • CVE-2026-60674 - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unaut... read CVE-2026-60674
    Published: July 21, 2026; 6:18:08 PM -0400

  • CVE-2026-60678 - Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ... read CVE-2026-60678
    Published: July 21, 2026; 6:18:08 PM -0400

  • CVE-2026-60772 - Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with... read CVE-2026-60772
    Published: July 21, 2026; 6:18:16 PM -0400

  • CVE-2026-60811 - Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged atta... read CVE-2026-60811
    Published: July 21, 2026; 6:18:19 PM -0400

  • CVE-2026-60800 - Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wi... read CVE-2026-60800
    Published: July 21, 2026; 6:18:18 PM -0400

  • CVE-2026-60708 - Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged atta... read CVE-2026-60708
    Published: July 21, 2026; 6:18:11 PM -0400

  • CVE-2026-60685 - Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network acces... read CVE-2026-60685
    Published: July 21, 2026; 6:18:09 PM -0400

  • CVE-2026-60810 - Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated att... read CVE-2026-60810
    Published: July 21, 2026; 6:18:19 PM -0400

  • CVE-2026-60683 - Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low priv... read CVE-2026-60683
    Published: July 21, 2026; 6:18:09 PM -0400

  • CVE-2026-60573 - Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ... read CVE-2026-60573
    Published: July 21, 2026; 6:17:57 PM -0400

  • CVE-2026-18201 - Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without h... read CVE-2026-18201
    Published: July 29, 2026; 6:16:40 AM -0400

  • CVE-2026-60670 - Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated a... read CVE-2026-60670
    Published: July 21, 2026; 6:18:07 PM -0400

  • CVE-2026-60703 - Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with lo... read CVE-2026-60703
    Published: July 21, 2026; 6:18:10 PM -0400

  • CVE-2026-60764 - Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with... read CVE-2026-60764
    Published: July 21, 2026; 6:18:15 PM -0400

  • CVE-2026-60771 - Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privile... read CVE-2026-60771
    Published: July 21, 2026; 6:18:16 PM -0400

  • CVE-2026-60681 - Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low priv... read CVE-2026-60681
    Published: July 21, 2026; 6:18:08 PM -0400

  • CVE-2026-60575 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo... read CVE-2026-60575
    Published: July 21, 2026; 6:17:57 PM -0400

  • CVE-2026-60812 - Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged atta... read CVE-2026-60812
    Published: July 21, 2026; 6:18:19 PM -0400

Created September 20, 2022 , Updated August 27, 2024