Vulnerabilità sfruttate
Oracle
46 vulnerabilità di Oracle nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.
Nel catalogo46
Ultimi 12 mesi5
In campagne ransomware13
Ultima aggiunta24 agosto 2026
Le vulnerabilità46
- 24 agosto 2026CVE-2026-21962HTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- 15 luglio 2026CVE-2026-46817E-Business SuiteOracle E-Business Suite Improper Privilege Management Vulnerability
- 12 giugno 2026CVE-2026-35273 PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityRansomware
- 1° giugno 2026CVE-2024-21182WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- 21 novembre 2025CVE-2025-61757Fusion MiddlewareOracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
- 20 ottobre 2025CVE-2025-61884E-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityRansomware
- 6 ottobre 2025CVE-2025-61882E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityRansomware
- 24 febbraio 2025CVE-2024-20953Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
- 7 gennaio 2025CVE-2020-2883WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- 21 novembre 2024CVE-2024-21287Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
- 18 settembre 2024CVE-2022-21445ADF FacesOracle ADF Faces Deserialization of Untrusted Data Vulnerability
- 18 settembre 2024CVE-2020-14644WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
- 3 giugno 2024CVE-2017-3506WebLogic ServerOracle WebLogic Server OS Command Injection Vulnerability
- 16 novembre 2023CVE-2020-2551Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
- 12 maggio 2023CVE-2016-3427Java SE and JRockitOracle Java SE and JRockit Unspecified Vulnerability
- 1° maggio 2023CVE-2023-21839WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- 2 febbraio 2023CVE-2022-21587E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityRansomware
- 28 novembre 2022CVE-2021-35587Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
- 8 settembre 2022CVE-2018-2628WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- 25 maggio 2022CVE-2019-3010SolarisOracle Solaris Privilege Escalation Vulnerability
- 25 maggio 2022CVE-2013-2423Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
- 25 maggio 2022CVE-2013-0431Java Runtime Environment (JRE)Oracle JRE Sandbox Bypass VulnerabilityRansomware
- 25 maggio 2022CVE-2013-0422Java Runtime Environment (JRE)Oracle JRE Remote Code Execution VulnerabilityRansomware
- 25 maggio 2022CVE-2012-1710Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityRansomware
- 25 maggio 2022CVE-2010-0840Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
- 28 marzo 2022CVE-2013-2465Java SEOracle Java SE Unspecified VulnerabilityRansomware
- 28 marzo 2022CVE-2012-5076Java SEOracle Java SE Sandbox Bypass Vulnerability
- 28 marzo 2022CVE-2012-0518Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
- 25 marzo 2022CVE-2019-2616BI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access Vulnerability
- 3 marzo 2022CVE-2015-4902Java SEOracle Java SE Integrity Check Vulnerability
- 3 marzo 2022CVE-2015-2590Java SEOracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
- 3 marzo 2022CVE-2012-4681Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
- 3 marzo 2022CVE-2012-1723Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
- 3 marzo 2022CVE-2012-0507Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
- 3 marzo 2022CVE-2011-3544Java SE JDK and JREOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- 3 marzo 2022CVE-2008-3431VirtualBoxOracle VirtualBox Insufficient Input Validation Vulnerability
- 10 febbraio 2022CVE-2017-10271WebLogic ServerOracle Corporation WebLogic Server Remote Code Execution VulnerabilityRansomware
- 18 gennaio 2022CVE-2020-14864Intelligence Enterprise EditionOracle Business Intelligence Enterprise Edition Path Transversal
- 10 gennaio 2022CVE-2019-2725WebLogic ServerOracle WebLogic Server, InjectionRansomware
- 3 novembre 2021CVE-2020-2555Multiple ProductsOracle Multiple Products Remote Code Execution Vulnerability
- 3 novembre 2021CVE-2020-14883WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
- 3 novembre 2021CVE-2020-14882WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
- 3 novembre 2021CVE-2020-14871Solaris and Zettabyte File System (ZFS)Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
- 3 novembre 2021CVE-2020-14750WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
- 3 novembre 2021CVE-2015-4852WebLogic ServerOracle WebLogic Server Deserialization of Untrusted Data Vulnerability
- 3 novembre 2021CVE-2012-3152Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.
Avvisi solo sui prodotti che usi
Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Oracle.