Advisories · Technology

Oracle Corporation Oracle Configurator.

Every CVE that names Oracle Corporation Oracle Configurator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-34274 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle Configurator
- Oracle Corporation Oracle Configurator
- Broken access control
Not analysed yet 21 Apr 2026
CVE-2026-21972 CVE record

CVSS 5.3 Medium

Oracle Corporation Oracle Configurator: Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component…
- Oracle Corporation Oracle Configurator
Not analysed yet 20 Jan 2026
CVE-2025-61884 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Server-side request forgery in Oracle Corporation Oracle Configurator
- Oracle Corporation Oracle Configurator
- Path traversal
- Other injection
Not analysed yet 12 Oct 2025
CVE-2025-30728 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Configurator
- Oracle Corporation Oracle Configurator
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-30720 CVE record

CVSS 6.1 Medium

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders).
- Oracle Corporation Oracle Configurator
Not analysed yet 15 Apr 2025