Vendor
Oracle vulnerabilities under active attack
45 Oracle vulnerabilities have confirmed evidence of exploitation in the wild, and 13 are used in ransomware campaigns.
45
confirmed exploited
13
used in ransomware
45
past fix deadline
- CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle · E-Business Suite
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools
- CVE-2024-21182 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle · Fusion Middleware
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle · Agile Product Lifecycle Management (PLM)
- CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle · ADF Faces
- CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability Oracle · WebLogic Server
- CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability Oracle · Java SE and JRockit
- CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2019-3010 Oracle Solaris Privilege Escalation Vulnerability Oracle · Solaris
- CVE-2013-2423 Oracle JRE Unspecified Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2013-0431 Oracle JRE Sandbox Bypass Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2010-0840 Oracle JRE Unspecified Vulnerability Oracle · Java Runtime Environment (JRE)
- CVE-2013-2465 Oracle Java SE Unspecified Vulnerability Oracle · Java SE
- CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability Oracle · Java SE
- CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle · BI Publisher (Formerly XML Publisher)
- CVE-2015-4902 Oracle Java SE Integrity Check Vulnerability Oracle · Java SE
- CVE-2015-2590 Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Oracle · Java SE
- CVE-2012-4681 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-1723 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2012-0507 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE
- CVE-2011-3544 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · Java SE JDK and JRE
- CVE-2008-3431 Oracle VirtualBox Insufficient Input Validation Vulnerability Oracle · VirtualBox
- CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal Oracle · Intelligence Enterprise Edition
- CVE-2019-2725 Oracle WebLogic Server, Injection Oracle · WebLogic Server
- CVE-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability Oracle · Multiple Products
- CVE-2012-3152 Oracle Fusion Middleware Unspecified Vulnerability Oracle · Fusion Middleware
- CVE-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability Oracle · Solaris and Zettabyte File System (ZFS)
- CVE-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability Oracle · WebLogic Server
- CVE-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability Oracle · WebLogic Server
- CVE-2020-14883 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server