Oracle: known exploited vulnerabilities
46Catalog entries
13Ransomware use
2026-08-24Last added
2026-08-27Latest due date
Get an email when Oracle is next added.Watch Oracle
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability |
2026-08-27 |
| CVE-2026-46817 | E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability |
2026-07-18 |
| CVE-2026-35273 | PeopleSoft Enterprise PeopleTools RANSOMWARE Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability |
2026-06-15 |
| CVE-2024-21182 | WebLogic Server Oracle WebLogic Server Unspecified Vulnerability |
2026-06-04 |
| CVE-2025-61757 | Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability |
2025-12-12 |
| CVE-2025-61884 | E-Business Suite RANSOMWARE Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
2025-11-10 |
| CVE-2025-61882 | E-Business Suite RANSOMWARE Oracle E-Business Suite Unspecified Vulnerability |
2025-10-27 |
| CVE-2024-20953 | Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability |
2025-03-17 |
| CVE-2020-2883 | WebLogic Server Oracle WebLogic Server Unspecified Vulnerability |
2025-01-28 |
| CVE-2024-21287 | Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability |
2024-12-12 |
| CVE-2022-21445 | ADF Faces Oracle ADF Faces Deserialization of Untrusted Data Vulnerability |
2024-10-09 |
| CVE-2020-14644 | WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability |
2024-10-09 |
| CVE-2017-3506 | WebLogic Server Oracle WebLogic Server OS Command Injection Vulnerability |
2024-06-24 |
| CVE-2020-2551 | Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability |
2023-12-07 |
| CVE-2016-3427 | Java SE and JRockit Oracle Java SE and JRockit Unspecified Vulnerability |
2023-06-02 |
| CVE-2023-21839 | WebLogic Server Oracle WebLogic Server Unspecified Vulnerability |
2023-05-22 |
| CVE-2022-21587 | E-Business Suite RANSOMWARE Oracle E-Business Suite Unspecified Vulnerability |
2023-02-23 |
| CVE-2021-35587 | Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability |
2022-12-19 |
| CVE-2018-2628 | WebLogic Server Oracle WebLogic Server Unspecified Vulnerability |
2022-09-29 |
| CVE-2010-0840 | Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability |
2022-06-15 |
| CVE-2012-1710 | Fusion Middleware RANSOMWARE Oracle Fusion Middleware Unspecified Vulnerability |
2022-06-15 |
| CVE-2013-0422 | Java Runtime Environment (JRE) RANSOMWARE Oracle JRE Remote Code Execution Vulnerability |
2022-06-15 |
| CVE-2013-0431 | Java Runtime Environment (JRE) RANSOMWARE Oracle JRE Sandbox Bypass Vulnerability |
2022-06-15 |
| CVE-2013-2423 | Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability |
2022-06-15 |
| CVE-2019-3010 | Solaris Oracle Solaris Privilege Escalation Vulnerability |
2022-06-15 |
| CVE-2012-0518 | Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability |
2022-04-18 |
| CVE-2012-5076 | Java SE Oracle Java SE Sandbox Bypass Vulnerability |
2022-04-18 |
| CVE-2013-2465 | Java SE RANSOMWARE Oracle Java SE Unspecified Vulnerability |
2022-04-18 |
| CVE-2019-2616 | BI Publisher (Formerly XML Publisher) Oracle BI Publisher Unauthorized Access Vulnerability |
2022-04-15 |
| CVE-2008-3431 | VirtualBox Oracle VirtualBox Insufficient Input Validation Vulnerability |
2022-03-24 |
| CVE-2011-3544 | Java SE JDK and JRE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
2022-03-24 |
| CVE-2012-0507 | Java SE RANSOMWARE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
2022-03-24 |
| CVE-2012-1723 | Java SE RANSOMWARE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
2022-03-24 |
| CVE-2012-4681 | Java SE RANSOMWARE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
2022-03-24 |
| CVE-2015-2590 | Java SE Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability |
2022-03-24 |
| CVE-2015-4902 | Java SE Oracle Java SE Integrity Check Vulnerability |
2022-03-24 |
| CVE-2017-10271 | WebLogic Server RANSOMWARE Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
2022-08-10 |
| CVE-2020-14864 | Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition Path Transversal |
2022-07-18 |
| CVE-2019-2725 | WebLogic Server RANSOMWARE Oracle WebLogic Server, Injection |
2022-07-10 |
| CVE-2020-14883 | WebLogic Server Oracle WebLogic Server Unspecified Vulnerability |
2022-05-03 |
| CVE-2020-14882 | WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2020-14750 | WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2015-4852 | WebLogic Server Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability |
2022-05-03 |
| CVE-2020-14871 | Solaris and Zettabyte File System (ZFS) Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability |
2022-05-03 |
| CVE-2012-3152 | Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability |
2022-05-03 |
| CVE-2020-2555 | Multiple Products Oracle Multiple Products Remote Code Execution Vulnerability |
2022-05-03 |