Katalog CVE (hal. 909)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.988 (Critical 36.707 · High 106.683 · KEV 1.766 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 45.401–45.450 dari 266.988 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-47004 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affecte...	8.8 High	—	0,43%	21 Jul 2026
CVE-2026-47003 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13....	5.9 Medium	—	0,33%	21 Jul 2026
CVE-2026-47002 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13....	6.1 Medium	—	0,25%	21 Jul 2026
CVE-2026-47001 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework). Supported versions that are affect...	5.4 Medium	—	0,23%	21 Jul 2026
CVE-2026-47000 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). The supported version that is affecte...	3.5 Low	—	0,14%	21 Jul 2026
CVE-2026-46999 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected...	7.0 High	—	0,29%	21 Jul 2026
CVE-2026-46998 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are...	8.8 High	—	0,42%	21 Jul 2026
CVE-2026-46997 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are...	6.5 Medium	—	0,30%	21 Jul 2026
CVE-2026-46996 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are...	7.1 High	—	0,28%	21 Jul 2026
CVE-2026-46995 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are...	8.8 High	—	0,43%	21 Jul 2026
CVE-2026-46994 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46993 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	8.2 High	—	0,29%	21 Jul 2026
CVE-2026-46992 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are...	8.8 High	—	0,43%	21 Jul 2026
CVE-2026-46991 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are...	4.4 Medium	—	0,14%	21 Jul 2026
CVE-2026-46990 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are...	7.3 High	—	0,31%	21 Jul 2026
CVE-2026-46989 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13....	9.1 Critical	—	0,32%	21 Jul 2026
CVE-2026-46988 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected...	7.2 High	—	0,49%	21 Jul 2026
CVE-2026-46987 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that ar...	7.7 High	—	0,35%	21 Jul 2026
CVE-2026-46986 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46985 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46984 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46983 oracle retail integration bus Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easi...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46982 oracle retail integration bus Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Ea...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46981 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2....	7.2 High	—	0,27%	21 Jul 2026
CVE-2026-46980 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2....	4.3 Medium	—	0,27%	21 Jul 2026
CVE-2026-46975 oracle database server Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable v...	5.8 Medium	—	0,30%	21 Jul 2026
CVE-2026-46968 oracle jre, oracle jdk +2 lainnya Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1;...	5.9 Medium	—	0,29%	21 Jul 2026
CVE-2026-46954 oracle human resources Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. E...	7.2 High	—	0,49%	21 Jul 2026
CVE-2026-46948 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). Supported versions that are affected are...	4.6 Medium	—	0,21%	21 Jul 2026
CVE-2026-46943 oracle retail eftlink Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). Supported versions that are affected are 21.0.0-25.0.0. Diffic...	7.4 High	—	0,34%	21 Jul 2026
CVE-2026-46941 oracle cost management Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-12.2.15. Di...	7.5 High	—	0,33%	21 Jul 2026
CVE-2026-46936 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9...	4.4 Medium	—	0,33%	21 Jul 2026
CVE-2026-46924 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46923 oracle public sector financials Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected...	8.0 High	—	0,38%	21 Jul 2026
CVE-2026-46917 oracle graalvm, oracle graalvm for jdk +2 lainnya Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are a...	5.3 Medium	—	0,29%	21 Jul 2026
CVE-2026-46876 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-43947 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an unauthenticated Remote Code Execution vulnerability when `secureEnabled` is...	8.9 High	—	0,91%	21 Jul 2026
CVE-2026-43946 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticate...	7.7 High	—	0,57%	21 Jul 2026
CVE-2026-43945 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code...	8.9 High	—	0,84%	21 Jul 2026
CVE-2026-35290 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-35287 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	7.5 High	—	0,41%	21 Jul 2026
CVE-2026-34316 oracle commerce service center Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. E...	6.1 Medium	—	0,25%	21 Jul 2026
CVE-2026-21954 oracle retail xstore point of service Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 2...	4.3 Medium	—	0,27%	21 Jul 2026
CVE-2026-21953 oracle retail xstore point of service Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 2...	3.3 Low	—	0,14%	21 Jul 2026
CVE-2026-16484 A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_subjecta.php....	7.3 High	—	0,43%	21 Jul 2026
CVE-2026-10680 zephyrproject zephyr The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command size a...	7.6 High	—	0,16%	21 Jul 2026
CVE-2026-10679 zephyrproject zephyr The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency....	5.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-10678 zephyrproject zephyr The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_i2c...	8.1 High	—	0,39%	21 Jul 2026
CVE-2026-10677 zephyrproject zephyr The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then val...	6.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-10675 zephyrproject zephyr In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditional...	6.5 Medium	—	0,39%	21 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.