Known Vulnerabilities for Exchange by Oracle
Listed below are 1 of the newest known vulnerabilities associated with "Exchange" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128087 json | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until v... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-128049 json | OpenMage Magento LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability ... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126997 json | A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeec... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-126943 json | Zipline from 4.2.0 before 4.6.2 contains an information disclosure vulnerability that logs sensitive environment variable val... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126136 json | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to th... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125652 json | A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and authorization log... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124760 json | P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-123611 json | rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-... | Not Provided | 2026-11-08 | 2026-11-13 |
| CVE-2026-123200 json | VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::handle_sender_message() and handle_t... | Not Provided | 2026-11-05 | 2026-11-09 |
| CVE-2026-123059 json | In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled st... | Not Provided | 2026-11-05 | 2026-11-05 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Exchange | - |