Login Request a demo
CO
Product
Configurator
by Oracle · last CVE Apr 21, 2026
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities17In the news1Timeline
Severity mix
Critical 0High 9Medium 4Low 0
Severity
All severities17Critical0High9Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Configurator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61884
RansomwareIn wildKEV
7.5
96%
Oct 12
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Affected: 12.2.3 through 12.2.14
CVE-2021-2080
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2021-2079
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2021-2078
8.2
1%
Jan 20
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2020-14669
8.2
1%
Jul 15
Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet)
Affected: 12.1; 12.2
CVE-2016-3438
8.2
2%
Apr 21
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and…
Affected: 12.1; 12.2
CVE-2022-21255
8.1
1%
Jan 19
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet)
Affected: 12.2.3 through 12.2.11
CVE-2025-30728
7.5
0%
Apr 15
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core)
Affected: 12.2.3 through 12.2.14
CVE-2019-2567
7.5
2%
Apr 23
Vulnerability in the Oracle Configurator component of Oracle Supply Chain Products Suite (subcomponent: Active Model Generation)
Affected: 12.1; 12.2
Showing 9