Oracle CVEs Not Published In Other Oracle Public Documents

This page lists Oracle CVEs which are not published in other Oracle public documents. These CVEs are divided into two categories.

Oracle CVEs associated with My Oracle Support (MOS) and not published in other Oracle public documents

The following is a public mapping between CVEs and associated My Oracle Support (MOS) remediation documents which are accessible to any Oracle customer with a valid support license.

Last updated on: 06/17/2022

 

Oracle CVEs for Oracle open source projects not published in other Oracle public documents

The following table lists Oracle CVEs for Oracle open source projects not published in other Oracle public documents.

Vulnerability Identifier Oracle Open Source Project Reference Credit
CVE-2026-35255 Oracle Open Source Project:  Oracle Cloud Native Environment Command Line Interface https://github.com/oracle-cne/ocne/pull/514 b0b0haha, j311yl0v3u
CVE-2026-35254 Oracle Open Source Project: Oracle OCI CLI https://github.com/oracle/oci-cli/releases/tag/v3.78.0 Lakshmikanthan K
CVE-2026-35253 Oracle Macaron Tool of Oracle Open Source Projects https://github.com/oracle/macaron/releases/tag/v0.23.0 Fushuling, RacerZ
CVE-2026-35228 Oracle Open Source Project: Oracle MCP Server Helper Tool https://github.com/oracle/mcp/pull/157 Kartik Nair
CVE-2026-21994 Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit https://github.com/oracle/oci-designer-toolkit/pull/780 Gouri Sankar A
CVE-2025-30755 OpenGrok https://github.com/oracle/opengrok/pull/4823 Mike Cole of Mantel Group
CVE-2025-21572 OpenGrok https://github.com/oracle/opengrok/pull/4727 XBOW Security Team
CVE-2021-2322 OpenGrok https://github.com/oracle/opengrok/pull/3528 Bobby Rauch of Accenture

Last updated on: 05/07/2026