EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Oracle

46 Oracle vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue46
Last 12 months5
In ransomware campaigns13
Last addition24 August 2026

The vulnerabilities46

  1. 24 August 2026CVE-2026-21962HTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
  2. 15 July 2026CVE-2026-46817E-Business SuiteOracle E-Business Suite Improper Privilege Management Vulnerability
  3. 12 June 2026CVE-2026-35273 PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityRansomware
  4. 1 June 2026CVE-2024-21182WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
  5. 21 November 2025CVE-2025-61757Fusion MiddlewareOracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
  6. 20 October 2025CVE-2025-61884E-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityRansomware
  7. 6 October 2025CVE-2025-61882E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityRansomware
  8. 24 February 2025CVE-2024-20953Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
  9. 7 January 2025CVE-2020-2883WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
  10. 21 November 2024CVE-2024-21287Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
  11. 18 September 2024CVE-2022-21445ADF FacesOracle ADF Faces Deserialization of Untrusted Data Vulnerability
  12. 18 September 2024CVE-2020-14644WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
  13. 3 June 2024CVE-2017-3506WebLogic ServerOracle WebLogic Server OS Command Injection Vulnerability
  14. 16 November 2023CVE-2020-2551Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
  15. 12 May 2023CVE-2016-3427Java SE and JRockitOracle Java SE and JRockit Unspecified Vulnerability
  16. 1 May 2023CVE-2023-21839WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
  17. 2 February 2023CVE-2022-21587E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityRansomware
  18. 28 November 2022CVE-2021-35587Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
  19. 8 September 2022CVE-2018-2628WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
  20. 25 May 2022CVE-2019-3010SolarisOracle Solaris Privilege Escalation Vulnerability
  21. 25 May 2022CVE-2013-2423Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
  22. 25 May 2022CVE-2013-0431Java Runtime Environment (JRE)Oracle JRE Sandbox Bypass VulnerabilityRansomware
  23. 25 May 2022CVE-2013-0422Java Runtime Environment (JRE)Oracle JRE Remote Code Execution VulnerabilityRansomware
  24. 25 May 2022CVE-2012-1710Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityRansomware
  25. 25 May 2022CVE-2010-0840Java Runtime Environment (JRE)Oracle JRE Unspecified Vulnerability
  26. 28 March 2022CVE-2013-2465Java SEOracle Java SE Unspecified VulnerabilityRansomware
  27. 28 March 2022CVE-2012-5076Java SEOracle Java SE Sandbox Bypass Vulnerability
  28. 28 March 2022CVE-2012-0518Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability
  29. 25 March 2022CVE-2019-2616BI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access Vulnerability
  30. 3 March 2022CVE-2015-4902Java SEOracle Java SE Integrity Check Vulnerability
  31. 3 March 2022CVE-2015-2590Java SEOracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
  32. 3 March 2022CVE-2012-4681Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
  33. 3 March 2022CVE-2012-1723Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
  34. 3 March 2022CVE-2012-0507Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
  35. 3 March 2022CVE-2011-3544Java SE JDK and JREOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
  36. 3 March 2022CVE-2008-3431VirtualBoxOracle VirtualBox Insufficient Input Validation Vulnerability
  37. 10 February 2022CVE-2017-10271WebLogic ServerOracle Corporation WebLogic Server Remote Code Execution VulnerabilityRansomware
  38. 18 January 2022CVE-2020-14864Intelligence Enterprise EditionOracle Business Intelligence Enterprise Edition Path Transversal
  39. 10 January 2022CVE-2019-2725WebLogic ServerOracle WebLogic Server, InjectionRansomware
  40. 3 November 2021CVE-2020-2555Multiple ProductsOracle Multiple Products Remote Code Execution Vulnerability
  41. 3 November 2021CVE-2020-14883WebLogic ServerOracle WebLogic Server Unspecified Vulnerability
  42. 3 November 2021CVE-2020-14882WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
  43. 3 November 2021CVE-2020-14871Solaris and Zettabyte File System (ZFS)Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
  44. 3 November 2021CVE-2020-14750WebLogic ServerOracle WebLogic Server Remote Code Execution Vulnerability
  45. 3 November 2021CVE-2015-4852WebLogic ServerOracle WebLogic Server Deserialization of Untrusted Data Vulnerability
  46. 3 November 2021CVE-2012-3152Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Oracle included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website