Known Vulnerabilities for Forms by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Forms" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116825 json | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-115807 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-115700 json | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-enco... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115479 json | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visito... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115183 json | The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding ... | Not Provided | 2026-10-25 | 2026-10-26 |
| CVE-2026-113713 json | virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-113300 json | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra... | Not Provided | 2026-10-20 | 2026-10-22 |
| CVE-2026-113197 json | Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside th... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112991 json | The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_s... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-112781 json | Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected conf... | Not Provided | 2026-10-19 | 2026-10-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Forms | 9i | |||
| Application | Oracle | Forms | 6i | |||
| Application | Oracle | Forms | 6.0.8.25 | |||
| Application | Oracle | Forms | 6.0 | |||
| Application | Oracle | Forms | 5.0 | |||
| Application | Oracle | Forms | 4.5.10.22 | |||
| Application | Oracle | Forms | 4.5 | |||
| Application | Oracle | Forms | 3.0 | |||
| Application | Oracle | Forms | 12.2.1.3.0 | |||
| Application | Oracle | Forms | 10g | |||
| Application | Oracle | Forms | - |