Login Request a demo
CO
Product
Configurator
by Oracle · last CVE Apr 21, 2026
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities17In the news1Timeline
Severity mix
Critical 0High 9Medium 4Low 0
Severity
All severities17Critical0High9Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Configurator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61884
RansomwareIn wildKEV
7.5
96%
Oct 12
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Affected: 12.2.3 through 12.2.14
CVE-2021-2080
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2021-2079
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2021-2078
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2020-14669
8.2
1%
Jul 15
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2016-3438
8.2
2%
Apr 21
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and…
Affected: 12.1; 12.2
CVE-2022-21255
8.1
1%
Jan 19
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet)
Affected: 12.2.3 through 12.2.11
CVE-2025-30728
7.5
0%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core)
Affected: 12.2.3 through 12.2.14
CVE-2019-2567
7.5
2%
Apr 23
Vulnerability in the Oracle Configurator component of Oracle Supply Chain Products Suite (subcomponent: Active Model Generation)
Affected: 12.1; 12.2
CVE-2026-34274
6.1
0%
Apr 21
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface)
Affected: 12.2.3 through 12.2.15
CVE-2025-30720
6.1
0%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders)
Affected: 12.2.3 through 12.2.14
CVE-2026-21972
5.3
0%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface)
Affected: 12.2.3 through 12.2.15
CVE-2020-2865
5.3
1%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation)
Affected: 12.1; 12.2
CVE-2016-0541
–
2%
Jan 21
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality…
Affected: 11.5.10.2; 12.1; 12.2
CVE-2016-0540
–
2%
Jan 21
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality…
Affected: 11.5.10.2; 12.1; 12.2
CVE-2002-1639
–
5%
Apr 1
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with…
Affected: 11.5.6.0.0 through 11.5.6.16.53; 11.5.7.0.0 through 11.5.7.17.31; 11i
CVE-2002-1640
–
5%
Apr 1
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 11.5.6.0.0 through 11.5.6.16.52; 11.5.7.0.0 through 11.5.7.17.31; 11i
Showing 17