Skip to content
BackEsc
Sign in

connection · two weakness classes

Cross-Site Request Forgery with Open Redirect

27 CVEs

Every dot is a CVE whose record names a weakness from both classes, neither being the other's parent in the CWE hierarchy: this is what the line between them on the dial stands for.

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.CVE-2017-90621.8% likely

    CWE-79

  2. An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute…CVE-2021-463660.8% likely

    CWE-352

  3. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60664Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  4. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60639Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  5. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60638Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  6. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60637Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  7. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60636Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  8. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60635Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  9. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60634Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  10. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60633Oracle Corporation · CVSS 8.8 · 0.2% likely

    CWE-601Oracle

  11. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1…CVE-2026-60650Oracle Corporation · CVSS 8 · 0.2% likely

    CWE-601Oracle

  12. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1…CVE-2026-60646Oracle Corporation · CVSS 8 · 0.2% likely

    CWE-601Oracle

  13. Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Services Applications (component: Common). Supported versions that are affected ar…CVE-2026-61097Oracle Corporation · CVSS 9.6 · 0.2% likely

    CWE-601Oracle

  14. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allo…CVE-2026-61082Oracle Corporation · CVSS 6.5 · 0.2% likely

    CWE-601Oracle

  15. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1…CVE-2026-60648Oracle Corporation · CVSS 8 · 0.2% likely

    CWE-601Oracle

  16. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60640Oracle Corporation · CVSS 8.3 · 0.2% likely

    CWE-601Oracle

  17. Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home Page). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…CVE-2026-46894Oracle Corporation · CVSS 8 · 0.2% likely

    CWE-601Oracle

  18. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60658Oracle Corporation · CVSS 7.5 · 0.2% likely

    CWE-601Oracle

  19. Traccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider EndpointsCVE-2026-25649traccar · CVSS 7.3 · 0.2% likely

    CWE-352Traccar

  20. Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v…CVE-2026-46955Oracle Corporation · CVSS 7.5 · 0.2% likely

    CWE-601Oracle

  21. Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0.…CVE-2026-60642Oracle Corporation · CVSS 7.6 · 0.2% likely

    CWE-601Oracle

  22. Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitabl…CVE-2026-60842Oracle Corporation · CVSS 6.1 · 0.1% likely

    CWE-601Oracle

  23. Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab…CVE-2026-60685Oracle Corporation · CVSS 6.1 · 0.1% likely

    CWE-601Oracle

  24. Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily ex…CVE-2026-62563Oracle Corporation · CVSS 5.4 · 0.1% likely

    CWE-601Oracle

  25. Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.…CVE-2026-60957Oracle Corporation · CVSS 5.4 · 0.1% likely

    CWE-601Oracle

  26. Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily e…CVE-2026-60911Oracle Corporation · CVSS 5.4 · 0.1% likely

    CWE-601Oracle

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in