Login Request a demo
OC
Product
Oracle Configurator
by Oracle Corporation · last CVE Apr 21, 2026
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news1Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Oracle Configurator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61884
RansomwareIn wildKEV
7.5
96%
Oct 12
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Affected: 12.2.3 through 12.2.14
CVE-2025-30728
7.5
0%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core)
Affected: 12.2.3 through 12.2.14
CVE-2026-34274
6.1
0%
Apr 21
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface)
Affected: 12.2.3 through 12.2.15
CVE-2025-30720
6.1
0%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders)
Affected: 12.2.3 through 12.2.14
CVE-2026-21972
5.3
0%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface)
Affected: 12.2.3 through 12.2.15
Showing 5