oracle_http_server vulnerabilities
CVEs whose affected-version data names the oracle_http_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-87347Critical· 9.6Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker w…
CVE-2026-87346High· 8.7Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server)
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to expl…
CVE-2026-91419High· 7.8Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to t…
CVE-2026-91473High· 7.8Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to …