Product by Oracle Corporation

Oracle HTTP Server

13 known vulnerabilities in Oracle HTTP Server (Oracle Corporation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle HTTP Server (Oracle Corporation)

Critical	CVE-2026-87347	Oracle HTTP Server: Exposure of Sensitive Information to an Unauthorized Actor also in 2 other products	9.6	20.10.2026
Critical	CVE-2026-60363	Oracle HTTP Server: Improper Access Control also in 2 other products	9.8	21.07.2026
Critical	CVE-2026-60364	Oracle Weblogic Server Proxy Plug-in: security vulnerability also in 4 other products	9.8	21.07.2026
Critical	CVE-2026-60365	Oracle Weblogic Server Proxy Plug-in: security vulnerability also in 4 other products	10.0	21.07.2026
High	CVE-2026-87346	Oracle HTTP Server: Exposure of Sensitive Information to an Unauthorized Actor also in 1 other product	8.7	20.10.2026
Critical	CVE-2026-60438	Oracle HTTP Server: Improper Access Control also in 2 other products	9.1	21.07.2026
High	CVE-2026-60431	Oracle HTTP Server: Exposure of Sensitive Information to an Unauthorized Actor also in 2 other products	8.6	21.07.2026
High	CVE-2026-91419	Oracle HTTP Server: security vulnerability also in 1 other product	7.8	20.10.2026
High	CVE-2026-91473	Oracle HTTP Server: security vulnerability also in 1 other product	7.8	20.10.2026
High	CVE-2026-34291	Oracle HTTP Server: Improper Access Control also in 1 other product	8.7	21.04.2026
High	CVE-2026-60530	Oracle HTTP Server: Improper Privilege Management also in 2 other products	7.8	21.07.2026
High	CVE-2026-60454	Oracle HTTP Server: Improper Privilege Management also in 2 other products	7.8	21.07.2026
Medium	CVE-2025-21498	Oracle HTTP Server: security vulnerability also in 1 other product	5.3	21.01.2025