Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vendor

Oracle

46 known exploited

Oracle news

No recent coverage.

Actively exploited

All 46 →
CVE-2026-21962CVSS 10.0

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Added Aug 24, 2026Fed. due Aug 27, 2026
CVE-2026-46817CVSS 9.8

Oracle E-Business Suite

Oracle E-Business Suite Improper Privilege Management Vulnerability

Added Jul 15, 2026Fed. due Jul 18, 2026
CVE-2026-35273RansomwareCVSS 9.8

Oracle PeopleSoft Enterprise PeopleTools

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Added Jun 12, 2026Fed. due Jun 15, 2026
CVE-2024-21182CVSS 7.5

Oracle WebLogic Server

Oracle WebLogic Server Unspecified Vulnerability

Added Jun 1, 2026Fed. due Jun 4, 2026
CVE-2025-61757CVSS 9.8

Oracle Fusion Middleware

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Added Nov 21, 2025Fed. due Dec 12, 2025
CVE-2025-61884RansomwareCVSS 7.5

Oracle E-Business Suite

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Added Oct 20, 2025Fed. due Nov 10, 2025
CVE-2025-61882RansomwareCVSS 9.8

Oracle E-Business Suite

Oracle E-Business Suite Unspecified Vulnerability

Added Oct 6, 2025Fed. due Oct 27, 2025
CVE-2024-20953CVSS 8.8

Oracle Agile Product Lifecycle Management (PLM)

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Added Feb 24, 2025Fed. due Mar 17, 2025
CVE-2020-2883CVSS 9.8

Oracle WebLogic Server

Oracle WebLogic Server Unspecified Vulnerability

Added Jan 7, 2025Fed. due Jan 28, 2025
CVE-2024-21287CVSS 7.5

Oracle Agile Product Lifecycle Management (PLM)

Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Added Nov 21, 2024Fed. due Dec 12, 2024
CVE-2020-14644CVSS 9.8

Oracle WebLogic Server

Oracle WebLogic Server Remote Code Execution Vulnerability

Added Sep 18, 2024Fed. due Oct 9, 2024
CVE-2022-21445CVSS 9.8

Oracle ADF Faces

Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

Added Sep 18, 2024Fed. due Oct 9, 2024
CVE-2017-3506CVSS 7.4

Oracle WebLogic Server

Oracle WebLogic Server OS Command Injection Vulnerability

Added Jun 3, 2024Fed. due Jun 24, 2024
CVE-2020-2551CVSS 9.8

Oracle Fusion Middleware

Oracle Fusion Middleware Unspecified Vulnerability

Added Nov 16, 2023Fed. due Dec 7, 2023
CVE-2016-3427CVSS 9.8

Oracle Java SE and JRockit

Oracle Java SE and JRockit Unspecified Vulnerability

Added May 12, 2023Fed. due Jun 2, 2023
CVE-2023-21839CVSS 7.5

Oracle WebLogic Server

Oracle WebLogic Server Unspecified Vulnerability

Added May 1, 2023Fed. due May 22, 2023
CVE-2022-21587RansomwareCVSS 9.8

Oracle E-Business Suite

Oracle E-Business Suite Unspecified Vulnerability

Added Feb 2, 2023Fed. due Feb 23, 2023
CVE-2021-35587CVSS 9.8

Oracle Fusion Middleware

Oracle Fusion Middleware Unspecified Vulnerability

Added Nov 28, 2022Fed. due Dec 19, 2022
CVE-2018-2628CVSS 9.8

Oracle WebLogic Server

Oracle WebLogic Server Unspecified Vulnerability

Added Sep 8, 2022Fed. due Sep 29, 2022
CVE-2010-0840CVSS 9.8

Oracle Java Runtime Environment (JRE)

Oracle JRE Unspecified Vulnerability

Added May 25, 2022Fed. due Jun 15, 2022

Products

WebLogic Server · 12 KEVJava SE · 7 KEVFusion Middleware · 6 KEVE-Business Suite · 4 KEVJava Runtime Environment (JRE) · 4 KEVAgile Product Lifecycle Management (PLM) · 2 KEVADF Faces · 1 KEVBI Publisher (Formerly XML Publisher) · 1 KEVHTTP Server and Oracle Weblogic Server Proxy Plug-in · 1 KEVIntelligence Enterprise Edition · 1 KEVJava SE and JRockit · 1 KEVJava SE JDK and JRE · 1 KEVMultiple Products · 1 KEVPeopleSoft Enterprise PeopleTools · 1 KEVSolaris · 1 KEVSolaris and Zettabyte File System (ZFS) · 1 KEVVirtualBox · 1 KEV