Product by Oracle

    Oracle SOA Suite

    33 known vulnerabilities in Oracle SOA Suite (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    14

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle SOA Suite (Oracle)
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    CriticalCVE-2018-1000613

    Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data

    also in 22 other products

    		9.8
    HighCVE-2019-17359

    Apache Software Foundation TomEE: security vulnerability

    also in 20 other products

    		7.5
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 18 other products

    		7.5
    CriticalCVE-2026-91216

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		10.0
    CriticalCVE-2026-91234

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-91233

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-91236

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-91235

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-91214

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    HighCVE-2017-10026

    Oracle SOA Suite: security vulnerability

    also in 1 other product

    		8.2
    CriticalCVE-2026-91225

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.1
    CriticalCVE-2026-60538

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-60541

    Oracle SOA Suite: Improper Access Control

    also in 2 other products

    		9.8
    CriticalCVE-2026-91218

    Oracle SOA Suite: Incorrect Authorization

    also in 2 other products

    		9.6
    HighCVE-2026-91239

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		8.8
    CriticalCVE-2026-91230

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		9.3
    HighCVE-2026-91217

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		8.6
    HighCVE-2026-61002

    Oracle SOA Suite: Improper Access Control

    also in 2 other products

    		8.8
    HighCVE-2026-91219

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		8.6
    HighCVE-2026-91237

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		7.5
    CriticalCVE-2026-60540

    Oracle SOA Suite: Improper Access Control

    also in 2 other products

    		9.6
    HighCVE-2026-60539

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		8.8
    HighCVE-2026-60544

    Oracle SOA Suite: Missing Authentication for Critical Function

    also in 2 other products

    		8.2
    HighCVE-2026-91238

    Oracle SOA Suite: Uncontrolled Resource Consumption

    also in 2 other products

    		7.1

    All vulnerabilities in search

    News

    All products by Oracle