Vendor

    Oracle Corporation

    14,713 known vulnerabilities in products by Oracle Corporation, 89 of them actively exploited (CISA KEV).

    Key figures

    14,713

    Vulnerabilities

    89

    Actively exploited (KEV)

    23

    Used by ransomware

    1,254

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Oracle Corporation
    SeverityCVETitleCVSSPublished
    CriticalCVE-2026-35273

    Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-61882

    Oracle E-Business Suite Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2024-4577

    Argument Injection in PHP-CGI

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2023-46604

    Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

    In CISA KEVRansomware

    		10.0
    CriticalCVE-2025-24813

    Apache Tomcat Path Equivalence Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2022-21587

    Oracle E-Business Suite Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2017-5638

    Apache Struts Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2021-41773

    Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2021-42013

    Apache HTTP Server Path Traversal Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2013-2465

    Oracle Java SE Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-61884

    Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2012-4681

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2012-0507

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2018-1273

    VMware Tanzu Spring Data Commons Property Binder Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2013-0422

    Oracle JRE Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2012-1723

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2021-40438

    mod_proxy SSRF

    In CISA KEVRansomware

    		9.0
    CriticalCVE-2012-1710

    Oracle Fusion Middleware Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2026-64849

    MLflow Server-Side Request Forgery Vulnerability

    In CISA KEV

    		9.3
    CriticalCVE-2021-4034

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    In CISA KEVRansomware

    		7.8
    CriticalCVE-2008-2992

    Adobe Reader and Acrobat Input Validation Vulnerability

    In CISA KEVRansomware

    		7.8
    CriticalCVE-2026-21962

    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2017-10271

    Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2019-2725

    Oracle WebLogic Server, Injection

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2025-61757

    Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

    In CISA KEV

    		9.8

    All vulnerabilities in search

    News

    Products

    Products by Oracle Corporation
    ProductCVEsActively exploited
    Oracle Corporation MySQL Server1,5220
    E-business Suite1,4113
    Fusion Middleware1,3954
    Oracle JRE81714
    Oracle JDK8058
    Oracle Solaris8037
    Oracle Database Server5780
    Oracle VM VirtualBox4871
    Siebel CRM4410
    Oracle Hyperion3870
    Oracle Corporation PeopleSoft Enterprise PeopleTools3812
    Oracle WebLogic Server36016
    Oracle Corporation MySQL Server3360
    Peoplesoft2611
    Communications2406
    Oracle Linux2328
    Oracle Corporation Outside In Technology2080
    Oracle GraalVM2001
    Oracle Application Server 10g1980
    Oracle Corporation JD Edwards EnterpriseOne Tools1732
    Jd Edwards1711
    Oracle Hyperion Financial Management1670
    Oracle Enterprise Manager Base Platform1631
    Oracle PeopleSoft Products1580
    Oracle WebCenter Portal1552
    Supply Chain1530
    Oracle Agile PLM1516
    Commerce1360
    Oracle Commerce Guided Search / Oracle Commerce Experience Manager1322
    Oracle Coherence1281
    Oracle Retail Xstore Point of Service1275
    Communications Cloud Native Core Policy1253
    Oracle WebCenter Content1190
    Oracle ZFS Storage Appliance Kit1173
    Oracle Corporation Helidon1150
    Oracle HTTP Server1124
    Oracle FLEXCUBE Universal Banking1080
    Oracle Enterprise Manager Ops Center1072
    Oracle JRockit1071
    Oracle Hyperion Infrastructure Technology1020
    Enterprise Manager1000
    Oracle Business Intelligence Enterprise Edition993
    Oracle Corporation MySQL Cluster980
    Oracle OpenJDK981
    Oracle Advanced Outbound Telephony970
    Oracle Supply Chain Products Suite970
    Oracle Primavera Unifier951
    Oracle WebCenter Sites922
    Oracle Financial Services Analytical Applications Infrastructure903
    Oracle Enterprise Manager Grid Control840
    VM840
    Oracle Application Testing Suite831
    Oracle FLEXCUBE Private Banking831
    Commerce Experience Manager820
    Oracle Corporation Communications Diameter Signaling Router (DSR)802
    Rest Data Services801
    Oracle Marketing760
    Communications Cloud Native Core Binding Support Function753
    Oracle Communications Unified Inventory Management752
    Oracle Corporation PeopleSoft Enterprise SCM eProcurement750