Skip to content
THREATWIRE

CVE Tracker · Vendor

Oracle CVEs

47 CVEs in the tracker, 46 in the CISA KEV catalogue.

All vendors · RSS feed for Oracle · Tracker data last updated 18 Oct 2026.

Showing 47 of 47

  1. CVE-2026-21962CVSS 10.0 criticalEPSS 73.2%KEV2026-01-20

    HTTP Server and Oracle Weblogic Server Proxy Plug-in. Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

  2. CVE-2025-61882CVSS 9.8 criticalEPSS 100%KEV2025-10-05

    E-Business Suite. Oracle E-Business Suite Unspecified Vulnerability

  3. CVE-2023-21839CVSS 7.5 highEPSS 100%KEV2023-01-18

    WebLogic Server. Oracle WebLogic Server Unspecified Vulnerability

  4. CVE-2022-21587CVSS 9.8 criticalEPSS 98.3%KEV2022-10-18

    E-Business Suite. Oracle E-Business Suite Unspecified Vulnerability

  5. CVE-2020-14750CVSS 9.8 criticalEPSS 99.2%KEV2020-11-02

    WebLogic Server. Oracle WebLogic Server Remote Code Execution Vulnerability

  6. CVE-2020-14882CVSS 9.8 criticalEPSS 100%KEV2020-10-21

    WebLogic Server. Oracle WebLogic Server Remote Code Execution Vulnerability

  7. CVE-2019-2725CVSS 9.8 criticalEPSS 100%KEV2019-04-26

    WebLogic Server. Oracle WebLogic Server, Injection

  8. CVE-2018-2628CVSS 9.8 criticalEPSS 100%KEV2018-04-19

    WebLogic Server. Oracle WebLogic Server Unspecified Vulnerability

  9. CVE-2017-10271CVSS 7.5 highEPSS 100%KEV2017-10-19

    WebLogic Server. Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

  10. CVE-2017-1000028CVSS 7.5 highEPSS 99.5%2017-07-17

    glassfish server. Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Dire…

  11. CVE-2026-46817No CVSSEPSS 0.81%KEV

    E-Business Suite. Oracle E-Business Suite Improper Privilege Management Vulnerability

  12. CVE-2026-35273No CVSSEPSS 96.7%KEV

    PeopleSoft Enterprise PeopleTools. Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

  13. CVE-2025-61884No CVSSEPSS 95.9%KEV

    E-Business Suite. Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

  14. CVE-2025-61757No CVSSEPSS 88.6%KEV

    Fusion Middleware. Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

  15. CVE-2024-21287No CVSSEPSS 1.72%KEV

    Agile Product Lifecycle Management (PLM). Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

  16. CVE-2024-21182No CVSSEPSS 74.2%KEV

    WebLogic Server. Oracle WebLogic Server Unspecified Vulnerability

  17. CVE-2024-20953No CVSSEPSS 3.93%KEV

    Agile Product Lifecycle Management (PLM). Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

  18. CVE-2022-21445No CVSSEPSS 62.5%KEV

    ADF Faces. Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

  19. CVE-2021-35587No CVSSEPSS 96.3%KEV

    Fusion Middleware. Oracle Fusion Middleware Unspecified Vulnerability

  20. CVE-2020-2883No CVSSEPSS 94.6%KEV

    WebLogic Server. Oracle WebLogic Server Unspecified Vulnerability

  21. CVE-2020-2555No CVSSEPSS 97.1%KEV

    Multiple Products. Oracle Multiple Products Remote Code Execution Vulnerability

  22. CVE-2020-2551No CVSSEPSS 92.8%KEV

    Fusion Middleware. Oracle Fusion Middleware Unspecified Vulnerability

  23. CVE-2020-14883No CVSSEPSS 97.7%KEV

    WebLogic Server. Oracle WebLogic Server Unspecified Vulnerability

  24. CVE-2020-14871No CVSSEPSS 80.2%KEV

    Solaris and Zettabyte File System (ZFS). Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

  25. CVE-2020-14864No CVSSEPSS 97.2%KEV

    Intelligence Enterprise Edition. Oracle Business Intelligence Enterprise Edition Path Transversal

  26. CVE-2020-14644No CVSSEPSS 94.5%KEV

    WebLogic Server. Oracle WebLogic Server Remote Code Execution Vulnerability

  27. CVE-2019-3010No CVSSEPSS 13.4%KEV

    Solaris. Oracle Solaris Privilege Escalation Vulnerability

  28. CVE-2019-2616No CVSSEPSS 91.9%KEV

    BI Publisher (Formerly XML Publisher). Oracle BI Publisher Unauthorized Access Vulnerability

  29. CVE-2017-3506No CVSSEPSS 96.0%KEV

    WebLogic Server. Oracle WebLogic Server OS Command Injection Vulnerability

  30. CVE-2016-3427No CVSSEPSS 92.3%KEV

    Java SE and JRockit. Oracle Java SE and JRockit Unspecified Vulnerability

  31. CVE-2015-4902No CVSSEPSS 13.6%KEV

    Java SE. Oracle Java SE Integrity Check Vulnerability

  32. CVE-2015-4852No CVSSEPSS 95.0%KEV

    WebLogic Server. Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

  33. CVE-2015-2590No CVSSEPSS 25.5%KEV

    Java SE. Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

  34. CVE-2013-2465No CVSSEPSS 98.8%KEV

    Java SE. Oracle Java SE Unspecified Vulnerability

  35. CVE-2013-2423No CVSSEPSS 85.2%KEV

    Java Runtime Environment (JRE). Oracle JRE Unspecified Vulnerability

  36. CVE-2013-0431No CVSSEPSS 90.1%KEV

    Java Runtime Environment (JRE). Oracle JRE Sandbox Bypass Vulnerability

  37. CVE-2013-0422No CVSSEPSS 97.0%KEV

    Java Runtime Environment (JRE). Oracle JRE Remote Code Execution Vulnerability

  38. CVE-2012-5076No CVSSEPSS 91.3%KEV

    Java SE. Oracle Java SE Sandbox Bypass Vulnerability

  39. CVE-2012-4681No CVSSEPSS 98.5%KEV

    Java SE. Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

  40. CVE-2012-3152No CVSSEPSS 98.8%KEV

    Fusion Middleware. Oracle Fusion Middleware Unspecified Vulnerability

  41. CVE-2012-1723No CVSSEPSS 93.7%KEV

    Java SE. Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

  42. CVE-2012-1710No CVSSEPSS 7.83%KEV

    Fusion Middleware. Oracle Fusion Middleware Unspecified Vulnerability

  43. CVE-2012-0518No CVSSEPSS 4.69%KEV

    Fusion Middleware. Oracle Fusion Middleware Unspecified Vulnerability

  44. CVE-2012-0507No CVSSEPSS 98.2%KEV

    Java SE. Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

  45. CVE-2011-3544No CVSSEPSS 96.7%KEV

    Java SE JDK and JRE. Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

  46. CVE-2010-0840No CVSSEPSS 96.3%KEV

    Java Runtime Environment (JRE). Oracle JRE Unspecified Vulnerability

  47. CVE-2008-3431No CVSSEPSS 6.88%KEV

    VirtualBox. Oracle VirtualBox Insufficient Input Validation Vulnerability