Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
425,508CVE records
5,221Published, last 7 days
1,779In CISA KEV
1,460Critical, last 30 days
5,599Analysed
16:19 UTCLast NVD sync
Filters Show:
37 results. Oracle Business Process Management Suite.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-91358 | High | 8.2 |  Oracle Business Process Management Suite | Missing authentication for critica | - | - | 0.34% | Oct 20, 2026 |
| CVE-2026-91243 | Critical | 9.6 | Oracle Business Process Management Suite | Improper access control | - | - | 0.34% | Oct 20, 2026 |
| CVE-2026-91222 | Critical | 9.9 | Oracle Business Process Management Suite | Improper authentication | - | - | 0.40% | Oct 20, 2026 |
| CVE-2026-91220 | Critical | 9.8 | Oracle Business Process Management Suite | Improper authentication | - | - | 0.47% | Oct 20, 2026 |
| CVE-2026-91213 | High | 8.8 | Oracle Business Process Management Suite | Improper authentication | - | - | 0.40% | Oct 20, 2026 |
| CVE-2026-60542 | Critical | 9.9 | Oracle Business Process Management Suite | Improper access control | - | - | 0.43% | Jul 21, 2026 |
| CVE-2026-34284 | Medium | 6.1 | Oracle Business Process Management Suite | Improper access control | - | - | 0.18% | Apr 21, 2026 |
| CVE-2022-23307 | High | 8.8 |  Apache Chainsaw +25 | Deserialization of untrusted data | - | - | 54% | Jan 18, 2022 |
| CVE-2022-23305 | Critical | 9.8 | Apache Log4j +27 | SQL injection | - | - | 67% | Jan 18, 2022 |
| CVE-2022-23302 | High | 8.8 | Apache Log4j +25 | Deserialization of untrusted data | - | - | 64% | Jan 18, 2022 |
| CVE-2021-4104 | High | 7.5 | Apache Log4j +39 | Deserialization of untrusted data | - | - | 81% | Dec 14, 2021 |
| CVE-2021-37714 | High | 7.5 |  Jsoup +15 | CWE-248 | - | - | 6.7% | Aug 18, 2021 |
| CVE-2021-36090 | High | 7.5 | Apache Commons Compress +33 | CWE-130 | - | - | 13% | Jul 13, 2021 |
| CVE-2021-35517 | High | 7.5 | Apache Commons Compress +26 | CWE-130 | - | - | 11% | Jul 13, 2021 |
| CVE-2021-35516 | High | 7.5 | Apache Commons Compress +23 | CWE-130 | - | - | 12% | Jul 13, 2021 |
| CVE-2021-35515 | High | 7.5 | Apache Commons Compress +25 | CWE-834 | - | - | 12% | Jul 13, 2021 |
| CVE-2020-17521 | Medium | 5.5 | Apache Groovy +20 | - | - | - | 1.0% | Dec 7, 2020 |
| CVE-2020-1945 | Medium | 6.3 | Apache Ant +39 | Exposure of resource to wrong sphe | - | - | 1.8% | May 14, 2020 |
| CVE-2020-10683 | Critical | 9.8 |  Dom4j Project Dom4j +37 | XML external entity (XXE) | - | - | 7.3% | May 1, 2020 |
| CVE-2020-1951 | Medium | 5.5 | Apache Tika +5 | CWE-835 | - | - | 2.9% | Mar 23, 2020 |
