Known Vulnerabilities for Application Server by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Application Server" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103321 json | MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview ima... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103235 json | MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102823 json | Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs fo... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102721 json | A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. E... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102716 json | An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session hea... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102509 json | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java i... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-101915 json | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5... | Not Provided | 2026-09-28 | 2026-10-01 |
| CVE-2026-101061 json | utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete a... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-101047 json | Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enterprise... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-101042 json | Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based a... | Not Provided | 2026-09-27 | 2026-09-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Application Server | 9.2.0.7 | |||
| Application | Oracle | Application Server | 9.2.0.6 | |||
| Application | Oracle | Application Server | 9.0.4.3 | |||
| Application | Oracle | Application Server | 9.0.4.2 | |||
| Application | Oracle | Application Server | 9.0.4.1 | |||
| Application | Oracle | Application Server | 9.0.4.0 | |||
| Application | Oracle | Application Server | 9.0.4 | |||
| Application | Oracle | Application Server | 9.0.3.1 | |||
| Application | Oracle | Application Server | 9.0.3 | |||
| Application | Oracle | Application Server | 9.0.2.3 | |||
| Application | Oracle | Application Server | 9.0.2.2 | |||
| Application | Oracle | Application Server | 9.0.2.1 | |||
| Application | Oracle | Application Server | 9.0.2.0.1 | |||
| Application | Oracle | Application Server | 9.0.2.0.0 | |||
| Application | Oracle | Application Server | 9.0.2 | |||
| Application | Oracle | Application Server | 9.0.2 | |||
| Application | Oracle | Application Server | 9.0 | |||
| Application | Oracle | Application Server | 8.1.7 | |||
| Application | Oracle | Application Server | 7.0.4.4 | |||
| Application | Oracle | Application Server | 4.0.8.2 |