netVigilance Vulnerability intelligence since 2004

Oracle

46 Oracle vulnerabilities with confirmed exploitation in the wild, as published by CISA; 46 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Oracle
Vulnerability Status
overdue 14d2026-08-27 CVE-2026-21962 Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability 2026-08-24 10.0 past due
overdue 54d2026-07-18 CVE-2026-46817 Oracle / E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability 2026-07-15 9.8 past due
overdue 87d2026-06-15 CVE-2026-35273 Oracle / PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability 2026-06-12 9.8 past dueransomware
overdue 98d2026-06-04 CVE-2024-21182 Oracle / WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2026-06-01 7.5 past due
overdue 272d2025-12-12 CVE-2025-61757 Oracle / Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability 2025-11-21 9.8 past due
overdue 304d2025-11-10 CVE-2025-61884 Oracle / E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability 2025-10-20 7.5 past dueransomware
overdue 318d2025-10-27 CVE-2025-61882 Oracle / E-Business Suite Oracle E-Business Suite Unspecified Vulnerability 2025-10-06 9.8 past dueransomware
overdue 542d2025-03-17 CVE-2024-20953 Oracle / Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability 2025-02-24 8.8 past due
overdue 590d2025-01-28 CVE-2020-2883 Oracle / WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2025-01-07 9.8 past due
overdue 637d2024-12-12 CVE-2024-21287 Oracle / Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability 2024-11-21 7.5 past due
overdue 701d2024-10-09 CVE-2022-21445 Oracle / ADF Faces Oracle ADF Faces Deserialization of Untrusted Data Vulnerability 2024-09-18 9.8 past due
overdue 701d2024-10-09 CVE-2020-14644 Oracle / WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2024-09-18 9.8 past due
overdue 808d2024-06-24 CVE-2017-3506 Oracle / WebLogic Server Oracle WebLogic Server OS Command Injection Vulnerability 2024-06-03 7.4 past due
overdue 1008d2023-12-07 CVE-2020-2551 Oracle / Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2023-11-16 9.8 past due
overdue 1196d2023-06-02 CVE-2016-3427 Oracle / Java SE and JRockit Oracle Java SE and JRockit Unspecified Vulnerability 2023-05-12 9.8 past due
overdue 1207d2023-05-22 CVE-2023-21839 Oracle / WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2023-05-01 7.5 past due
overdue 1295d2023-02-23 CVE-2022-21587 Oracle / E-Business Suite Oracle E-Business Suite Unspecified Vulnerability 2023-02-02 9.8 past dueransomware
overdue 1361d2022-12-19 CVE-2021-35587 Oracle / Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-11-28 9.8 past due
overdue 1442d2022-09-29 CVE-2018-2628 Oracle / WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2022-09-08 9.8 past due
overdue 1548d2022-06-15 CVE-2019-3010 Oracle / Solaris Oracle Solaris Privilege Escalation Vulnerability 2022-05-25 8.8 past due
overdue 1548d2022-06-15 CVE-2013-2423 Oracle / Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability 2022-05-25 3.7 past due
overdue 1548d2022-06-15 CVE-2013-0431 Oracle / Java Runtime Environment (JRE) Oracle JRE Sandbox Bypass Vulnerability 2022-05-25 5.3 past dueransomware
overdue 1548d2022-06-15 CVE-2013-0422 Oracle / Java Runtime Environment (JRE) Oracle JRE Remote Code Execution Vulnerability 2022-05-25 9.8 past dueransomware
overdue 1548d2022-06-15 CVE-2012-1710 Oracle / Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-05-25 9.8 past dueransomware
overdue 1548d2022-06-15 CVE-2010-0840 Oracle / Java Runtime Environment (JRE) Oracle JRE Unspecified Vulnerability 2022-05-25 9.8 past due
overdue 1606d2022-04-18 CVE-2013-2465 Oracle / Java SE Oracle Java SE Unspecified Vulnerability 2022-03-28 9.8 past dueransomware
overdue 1606d2022-04-18 CVE-2012-5076 Oracle / Java SE Oracle Java SE Sandbox Bypass Vulnerability 2022-03-28 9.8 past due
overdue 1606d2022-04-18 CVE-2012-0518 Oracle / Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2022-03-28 4.7 past due
overdue 1609d2022-04-15 CVE-2019-2616 Oracle / BI Publisher (Formerly XML Publisher) Oracle BI Publisher Unauthorized Access Vulnerability 2022-03-25 7.2 past due
overdue 1631d2022-03-24 CVE-2015-4902 Oracle / Java SE Oracle Java SE Integrity Check Vulnerability 2022-03-03 5.3 past due
overdue 1631d2022-03-24 CVE-2015-2590 Oracle / Java SE Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability 2022-03-03 9.8 past due
overdue 1631d2022-03-24 CVE-2012-4681 Oracle / Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 9.8 past dueransomware
overdue 1631d2022-03-24 CVE-2012-1723 Oracle / Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 9.8 past dueransomware
overdue 1631d2022-03-24 CVE-2012-0507 Oracle / Java SE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 9.8 past dueransomware
overdue 1631d2022-03-24 CVE-2011-3544 Oracle / Java SE JDK and JRE Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability 2022-03-03 9.8 past due
overdue 1631d2022-03-24 CVE-2008-3431 Oracle / VirtualBox Oracle VirtualBox Insufficient Input Validation Vulnerability 2022-03-03 8.8 past due
overdue 1492d2022-08-10 CVE-2017-10271 Oracle / WebLogic Server Oracle Corporation WebLogic Server Remote Code Execution Vulnerability 2022-02-10 7.5 past dueransomware
overdue 1515d2022-07-18 CVE-2020-14864 Oracle / Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition Path Transversal 2022-01-18 7.5 past due
overdue 1523d2022-07-10 CVE-2019-2725 Oracle / WebLogic Server Oracle WebLogic Server, Injection 2022-01-10 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2020-2555 Oracle / Multiple Products Oracle Multiple Products Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-14883 Oracle / WebLogic Server Oracle WebLogic Server Unspecified Vulnerability 2021-11-03 7.2 past due
overdue 1591d2022-05-03 CVE-2020-14882 Oracle / WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-14871 Oracle / Solaris and Zettabyte File System (ZFS) Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability 2021-11-03 10.0 past due
overdue 1591d2022-05-03 CVE-2020-14750 Oracle / WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2015-4852 Oracle / WebLogic Server Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2012-3152 Oracle / Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability 2021-11-03 9.1 past due