Product by Oracle
Oracle Configurator
17 known vulnerabilities in Oracle Configurator (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-61884 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability In CISA KEVRansomwarealso in 1 other product | 7.5 | |
| High | CVE-2016-3438 | Oracle Configurator: Cross-Site Scripting (XSS) | 8.2 | |
| High | CVE-2019-2567 | Oracle Configurator: security vulnerability | 7.5 | |
| High | CVE-2020-14669 | Oracle Configurator: security vulnerability | 8.2 | |
| High | CVE-2021-2078 | Oracle Configurator: security vulnerability | 8.2 | |
| High | CVE-2021-2079 | Oracle Configurator: security vulnerability | 8.2 | |
| High | CVE-2021-2080 | Oracle Configurator: security vulnerability | 8.2 | |
| High | CVE-2022-21255 | Oracle Configurator: security vulnerability | 8.1 | |
| Not rated | CVE-2002-1639 | Oracle Configurator: Information Disclosure | — | |
| Medium | CVE-2020-2865 | Oracle Configurator: security vulnerability | 5.3 | |
| Not rated | CVE-2002-1640 | Oracle Configurator: Cross-Site Scripting (XSS) | — | |
| High | CVE-2025-30728 | Oracle Configurator: security vulnerability | 7.5 | |
| Not rated | CVE-2016-0541 | Oracle Configurator: security vulnerability | — | |
| Not rated | CVE-2016-0540 | Oracle Configurator: security vulnerability | — | |
| Medium | CVE-2026-34274 | Oracle Configurator: Improper Access Control | 6.1 | |
| Medium | CVE-2026-21972 | Oracle Configurator: security vulnerability | 5.3 | |
| Medium | CVE-2025-30720 | Oracle Configurator: security vulnerability | 6.1 |