Vendor

    Oracle Corporation

    8,860 known vulnerabilities in products by Oracle Corporation, 28 of them actively exploited (CISA KEV).

    Key figures

    8,860

    Vulnerabilities

    28

    Actively exploited (KEV)

    6

    Used by ransomware

    855

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Oracle Corporation
    SeverityCVETitleCVSSPublished
    CriticalCVE-2026-35273

    Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-61882

    Oracle E-Business Suite Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2022-21587

    Oracle E-Business Suite Unspecified Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-61884

    Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2026-21962

    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2017-10271

    Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2019-2725

    Oracle WebLogic Server, Injection

    In CISA KEVRansomware

    		7.5
    CriticalCVE-2025-61757

    Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-14871

    Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2021-35587

    Oracle Fusion Middleware Unspecified Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-14882

    Oracle WebLogic Server Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2018-2628

    Oracle WebLogic Server Unspecified Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-14750

    Oracle WebLogic Server Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-2555

    Oracle Multiple Products Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-14644

    Oracle WebLogic Server Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-2883

    Oracle WebLogic Server Unspecified Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-2551

    Oracle Fusion Middleware Unspecified Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2022-21445

    Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2024-21182

    Oracle WebLogic Server Unspecified Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2023-21839

    Oracle WebLogic Server Unspecified Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2019-3010

    Oracle Solaris Privilege Escalation Vulnerability

    In CISA KEV

    		8.8
    CriticalCVE-2020-14864

    Oracle Business Intelligence Enterprise Edition Path Transversal

    In CISA KEV

    		7.5
    CriticalCVE-2017-3506

    Oracle WebLogic Server OS Command Injection Vulnerability

    In CISA KEV

    		7.4
    CriticalCVE-2020-14883

    Oracle WebLogic Server Unspecified Vulnerability

    In CISA KEV

    		7.2
    CriticalCVE-2019-2616

    Oracle BI Publisher Unauthorized Access Vulnerability

    In CISA KEV

    		7.2

    All vulnerabilities in search

    News

    Products

    Products by Oracle Corporation
    ProductCVEsActively exploited
    Mysql Server1,1170
    VM Virtualbox2800
    Mysql Cluster2160
    Weblogic Server19011
    Peoplesoft Enterprise Pt Peopletools1870
    Java1790
    Oracle Hyperion Financial Management1590
    Jd Edwards Enterpriseone Tools1580
    Oracle VM Virtualbox1440
    Peoplesoft Enterprise Peopletools1371
    Helidon1350
    Solaris Operating System1352
    Outside In Technology1280
    Oracle Coherence1130
    Oracle Webcenter Content1110
    Oracle Commerce Guided Search / Oracle Commerce Experience Manager1050
    Oracle Java Se1050
    Java Se JDK And JRE1020
    Oracle Business Intelligence Enterprise Edition740
    Siebel CRM Deployment730
    Oracle Hyperion Infrastructure Technology680
    Oracle Graalvm Enterprise Edition650
    Oracle Webcenter Portal650
    Oracle Graalvm For JDK630
    Database - Enterprise Edition620
    Siebel CRM Cloud Applications610
    Bi Publisher (formerly XML Publisher)601
    Oracle Weblogic Server590
    Oracle Hyperion Data Relationship Management580
    Flexcube Universal Banking570
    Oracle Database Server570
    Enterprise Manager Base Platform530
    Oracle Database510
    Oracle Webcenter Sites500
    Oracle Enterprise Manager Base Platform480
    Business Intelligence Enterprise Edition471
    Marketing470
    Mysql Connectors440
    Oracle Bi Publisher440
    Oracle Solaris440
    Oracle Access Manager430
    Oracle Rest Data Services430
    Oracle Webcenter Enterprise Capture430
    Oracle Reports Developer410
    CRM Technical Foundation400
    Oracle Essbase390
    Oracle Agile Plm380
    Sun Zfs Storage Appliance Kit (ak) Software380
    Oracle Identity Manager Connector370
    Istore360
    Oracle Hyperion Calculation Manager360
    Oracle Soa Suite360
    Complex Maintenance, Repair, And Overhaul350
    Oracle Identity Manager350
    Oracle Outside In Technology340
    Oracle Agile Product Lifecycle Management For Process330
    Oracle Hyperion Financial Reporting330
    Oracle Unified Directory320
    Primavera P6 Enterprise Project Portfolio Management320
    Siebel Apps - Marketing320