Oracle

Security Scorecard

Score

34F

Total CVEs

118

Patch Rate

48%

56 patched

Avg Response

10317d

days to patch

Critical Gaps

4

exploitable, no detection

Severity Breakdown

Critical2
High31
Medium73
Low2

Patch Status

Patched56 (47%)
Partial/Workaround0 (0%)
Unpatched62 (53%)

CVEs (118)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-21936MySQL Server InnoDB VulnerabilityMedium4.9-Patched
CVE-2026-21937MySQL Server Remote DDL VulnerabilityMedium4.9-Patched
CVE-2026-21938Oracle PeopleSoft Enterprise PeopleTools Portal VulnerabilityMedium6.1-Patched
CVE-2026-21939SQLcl SQL Injection VulnerabilityHigh7.0-Patched
CVE-2026-21941MySQL Server Optimizer VulnerabilityMedium4.9-Patched
CVE-2026-21943Oracle Scripting Admin Bypass VulnerabilityMedium6.1-Patched
CVE-2026-21944Oracle Agile Product Lifecycle Management for Process VulnerabilityMedium6.5-Patched
CVE-2026-21945Oracle Java SE and GraalVM VulnerabilityHigh7.5-Patched
CVE-2026-21946JD Edwards EnterpriseOne Tools Web Runtime SEC VulnerabilityMedium6.1-Patched
CVE-2026-21948MySQL Server Optimizer VulnerabilityMedium4.9-Patched