Oracle
Oracle known exploited vulnerabilities
Every Oracle vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 13 of them are known to be used by ransomware.
46 CVEs
- CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability · added August 24, 2026
- CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability · added July 15, 2026
- CVE-2026-35273 ransomwareOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability · added June 12, 2026
- CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability · added June 1, 2026
- CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability · added November 21, 2025
- CVE-2025-61884 ransomwareOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability · added October 20, 2025
- CVE-2025-61882 ransomwareOracle E-Business Suite Unspecified Vulnerability · added October 6, 2025
- CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability · added February 24, 2025
- CVE-2020-2883Oracle WebLogic Server Unspecified Vulnerability · added January 7, 2025
- CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability · added November 21, 2024
- CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data Vulnerability · added September 18, 2024
- CVE-2020-14644Oracle WebLogic Server Remote Code Execution Vulnerability · added September 18, 2024
- CVE-2017-3506Oracle WebLogic Server OS Command Injection Vulnerability · added June 3, 2024
- CVE-2020-2551Oracle Fusion Middleware Unspecified Vulnerability · added November 16, 2023
- CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability · added May 12, 2023
- CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability · added May 1, 2023
- CVE-2022-21587 ransomwareOracle E-Business Suite Unspecified Vulnerability · added February 2, 2023
- CVE-2021-35587Oracle Fusion Middleware Unspecified Vulnerability · added November 28, 2022
- CVE-2018-2628Oracle WebLogic Server Unspecified Vulnerability · added September 8, 2022
- CVE-2019-3010Oracle Solaris Privilege Escalation Vulnerability · added May 25, 2022
- CVE-2013-2423Oracle JRE Unspecified Vulnerability · added May 25, 2022
- CVE-2013-0431 ransomwareOracle JRE Sandbox Bypass Vulnerability · added May 25, 2022
- CVE-2013-0422 ransomwareOracle JRE Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2012-1710 ransomwareOracle Fusion Middleware Unspecified Vulnerability · added May 25, 2022
- CVE-2010-0840Oracle JRE Unspecified Vulnerability · added May 25, 2022
- CVE-2013-2465 ransomwareOracle Java SE Unspecified Vulnerability · added March 28, 2022
- CVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability · added March 28, 2022
- CVE-2012-0518Oracle Fusion Middleware Unspecified Vulnerability · added March 28, 2022
- CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability · added March 25, 2022
- CVE-2015-4902Oracle Java SE Integrity Check Vulnerability · added March 3, 2022
- CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2012-4681 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2012-1723 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2012-0507 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability · added March 3, 2022
- CVE-2017-10271 ransomwareOracle Corporation WebLogic Server Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2020-14864Oracle Business Intelligence Enterprise Edition Path Transversal · added January 18, 2022
- CVE-2019-2725 ransomwareOracle WebLogic Server, Injection · added January 10, 2022
- CVE-2020-14883Oracle WebLogic Server Unspecified Vulnerability · added November 3, 2021
- CVE-2020-14882Oracle WebLogic Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability · added November 3, 2021
- CVE-2020-14750Oracle WebLogic Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-2555Oracle Multiple Products Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability · added November 3, 2021
- CVE-2012-3152Oracle Fusion Middleware Unspecified Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).