Oracle
46 vulnerabilities in Oracle products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-21962 | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 24 Aug 2026 | 27 Aug 2026 | Unknown |
| CVE-2026-46817 | Oracle | E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 15 Jul 2026 | 18 Jul 2026 | Unknown |
| CVE-2026-35273 | Oracle | PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 12 Jun 2026 | 15 Jun 2026 | Known |
| CVE-2024-21182 | Oracle | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 1 Jun 2026 | 4 Jun 2026 | Unknown |
| CVE-2025-61757 | Oracle | Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 21 Nov 2025 | 12 Dec 2025 | Unknown |
| CVE-2025-61884 | Oracle | E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2025 | 10 Nov 2025 | Known |
| CVE-2025-61882 | Oracle | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 6 Oct 2025 | 27 Oct 2025 | Known |
| CVE-2024-20953 | Oracle | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 24 Feb 2025 | 17 Mar 2025 | Unknown |
| CVE-2020-2883 | Oracle | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 7 Jan 2025 | 28 Jan 2025 | Unknown |
| CVE-2024-21287 | Oracle | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 21 Nov 2024 | 12 Dec 2024 | Unknown |
| CVE-2020-14644 | Oracle | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 18 Sep 2024 | 9 Oct 2024 | Unknown |
| CVE-2022-21445 | Oracle | ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 18 Sep 2024 | 9 Oct 2024 | Unknown |
| CVE-2017-3506 | Oracle | WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | 3 Jun 2024 | 24 Jun 2024 | Unknown |
| CVE-2020-2551 | Oracle | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 16 Nov 2023 | 7 Dec 2023 | Unknown |
| CVE-2016-3427 | Oracle | Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | 12 May 2023 | 2 Jun 2023 | Unknown |
| CVE-2023-21839 | Oracle | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 1 May 2023 | 22 May 2023 | Unknown |
| CVE-2022-21587 | Oracle | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 2 Feb 2023 | 23 Feb 2023 | Known |
| CVE-2021-35587 | Oracle | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 28 Nov 2022 | 19 Dec 2022 | Unknown |
| CVE-2018-2628 | Oracle | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 8 Sep 2022 | 29 Sep 2022 | Unknown |
| CVE-2010-0840 | Oracle | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2012-1710 | Oracle | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 25 May 2022 | 15 Jun 2022 | Known |
| CVE-2013-0422 | Oracle | Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | 25 May 2022 | 15 Jun 2022 | Known |
| CVE-2013-0431 | Oracle | Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | 25 May 2022 | 15 Jun 2022 | Known |
| CVE-2013-2423 | Oracle | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2019-3010 | Oracle | Solaris | Oracle Solaris Privilege Escalation Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2012-0518 | Oracle | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Unknown |
| CVE-2012-5076 | Oracle | Java SE | Oracle Java SE Sandbox Bypass Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Unknown |
| CVE-2013-2465 | Oracle | Java SE | Oracle Java SE Unspecified Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Known |
| CVE-2019-2616 | Oracle | BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2008-3431 | Oracle | VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2011-3544 | Oracle | Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2012-0507 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2012-1723 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2012-4681 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2015-2590 | Oracle | Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-4902 | Oracle | Java SE | Oracle Java SE Integrity Check Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-10271 | Oracle | WebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | 10 Feb 2022 | 10 Aug 2022 | Known |
| CVE-2020-14864 | Oracle | Intelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | 18 Jan 2022 | 18 Jul 2022 | Unknown |
| CVE-2019-2725 | Oracle | WebLogic Server | Oracle WebLogic Server, Injection | 10 Jan 2022 | 10 Jul 2022 | Known |
| CVE-2012-3152 | Oracle | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2015-4852 | Oracle | WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-14750 | Oracle | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-14871 | Oracle | Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-14882 | Oracle | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-14883 | Oracle | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-2555 | Oracle | Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |