Oracle: known exploited vulnerabilities
Entries46No. 6
Ransomware-linked13
Products17
Latest2026-08-24
Added per year
By product
12
7
6
4
4
2
1
1
1
1
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 73.1% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 9.4% | Known |
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 74.1% | Unknown |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 88.6% | Unknown |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 95.8% | Known |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 99.7% | Known |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 3.9% | Unknown |
| CVE-2020-2883 | Oracle WebLogic Server | 2025-01-07 | 94.9% | Unknown |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 1.7% | Unknown |
| CVE-2022-21445 | Oracle ADF Faces | 2024-09-18 | 62.4% | Unknown |
| CVE-2020-14644 | Oracle WebLogic Server | 2024-09-18 | 94.5% | Unknown |
| CVE-2017-3506 | Oracle WebLogic Server | 2024-06-03 | 96.2% | Unknown |
| CVE-2020-2551 | Oracle Fusion Middleware | 2023-11-16 | 93.2% | Unknown |
| CVE-2016-3427 | Oracle Java SE and JRockit | 2023-05-12 | 92.3% | Unknown |
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | 99.9% | Unknown |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 98.3% | Known |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 96.2% | Unknown |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 99.9% | Unknown |
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 13.3% | Unknown |
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 85.2% | Unknown |
| CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 90.1% | Known |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 97.0% | Known |
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 7.8% | Known |
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 96.3% | Unknown |
| CVE-2013-2465 | Oracle Java SE | 2022-03-28 | 98.8% | Known |
| CVE-2012-5076 | Oracle Java SE | 2022-03-28 | 91.2% | Unknown |
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 4.6% | Unknown |
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 92.1% | Unknown |
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 13.6% | Unknown |
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 25.4% | Unknown |
| CVE-2012-4681 | Oracle Java SE | 2022-03-03 | 98.5% | Known |
| CVE-2012-1723 | Oracle Java SE | 2022-03-03 | 93.6% | Known |
| CVE-2012-0507 | Oracle Java SE | 2022-03-03 | 98.1% | Known |
| CVE-2011-3544 | Oracle Java SE JDK and JRE | 2022-03-03 | 96.6% | Unknown |
| CVE-2008-3431 | Oracle VirtualBox | 2022-03-03 | 6.8% | Unknown |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | 99.9% | Known |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 97.2% | Unknown |
| CVE-2019-2725 | Oracle WebLogic Server | 2022-01-10 | 99.9% | Known |
| CVE-2020-2555 | Oracle Multiple Products | 2021-11-03 | 97.1% | Unknown |
| CVE-2020-14883 | Oracle WebLogic Server | 2021-11-03 | 97.9% | Unknown |
| CVE-2020-14882 | Oracle WebLogic Server | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 80.1% | Unknown |
| CVE-2020-14750 | Oracle WebLogic Server | 2021-11-03 | 99.2% | Unknown |
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 96.0% | Unknown |
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 98.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 46 Oracle vulnerabilities (No. 6 of 288 vendors).