Skip to content
OpenAdvisories

Vendor

Oracle

9,094 known vulnerabilities.

Products

MySQL Server 1,134 VM VirtualBox 284 MySQL Cluster 220 PeopleSoft Enterprise PT PeopleTools 192 WebLogic Server 191 Java 179 Oracle Hyperion Financial Management 159 JD Edwards EnterpriseOne Tools 158 Oracle VM VirtualBox 144 Solaris Operating System 139 PeopleSoft Enterprise PeopleTools 137 Outside In Technology 137 Helidon 135 Oracle Coherence 113 Oracle WebCenter Content 111 Oracle Java SE 106 Oracle Commerce Guided Search / Oracle Commerce Experience Manager 105 Java SE JDK and JRE 102 Oracle Business Intelligence Enterprise Edition 74 Siebel CRM Deployment 73 FLEXCUBE Universal Banking 70 Oracle Hyperion Infrastructure Technology 68 Marketing 67 Oracle GraalVM Enterprise Edition 66 Oracle WebCenter Portal 65 Database - Enterprise Edition 64 Oracle GraalVM for JDK 64 Siebel CRM Cloud Applications 61 BI Publisher (formerly XML Publisher) 60 Oracle WebLogic Server 59 Oracle Hyperion Data Relationship Management 58 Oracle Database Server 57 Oracle Database 53 Enterprise Manager Base Platform 53 Advanced Outbound Telephony 52 Oracle WebCenter Sites 50 Oracle Enterprise Manager Base Platform 48 Business Intelligence Enterprise Edition 47 One-to-One Fulfillment 47 Oracle Solaris 44
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-35273 Exploited · Ransomware Public exploit EPSS 97%

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Man…

    Oracle PeopleSoft Enterprise PeopleTools
    KEV Jun 12, 2026
  • Critical 9.8
    CVE-2026-46817 Exploited Public exploit EPSS 12%

    Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi…

    Oracle Oracle Payments
    KEV Jul 15, 2026
  • Critical 10.0
    CVE-2026-21962 Exploited Public exploit EPSS 73%

    Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (comp…

    Oracle Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in
    KEV Aug 24, 2026
  • Critical 9.8
    CVE-2025-61757 Exploited Public exploit EPSS 89%

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers…

    Oracle Identity Manager
    KEV Nov 21, 2025
  • High 7.5
    CVE-2025-61884 Exploited · Ransomware Public exploit EPSS 96%

    Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions…

    Oracle Oracle Configurator
    KEV Oct 20, 2025
  • Critical 9.8
    CVE-2025-61882 Exploited · Ransomware Public exploit EPSS 100%

    Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integrati…

    Oracle Oracle Concurrent Processing
    KEV Oct 6, 2025
  • High 7.5
    CVE-2024-21287 Exploited

    Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Pr…

    Oracle Oracle Agile PLM Framework
    KEV Nov 21, 2024
  • High 7.5
    CVE-2024-21182 Exploited Public exploit EPSS 74%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Jun 1, 2026
  • High 8.8
    CVE-2024-20953 Exploited

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is…

    Oracle Agile PLM Framework
    KEV Feb 24, 2025
  • High 7.5
    CVE-2023-21839 Exploited Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV May 1, 2023
  • Critical 9.8
    CVE-2022-21587 Exploited · Ransomware Public exploit EPSS 98%

    Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).…

    Oracle Web Applications Desktop Integrator
    KEV Feb 2, 2023
  • Critical 9.8
    CVE-2022-21445 Exploited Public exploit EPSS 62%

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF…

    Oracle Application Development Framework (ADF)
    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2021-35587 Exploited Public exploit EPSS 96%

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ve…

    Oracle Access Manager
    KEV Nov 28, 2022
  • Critical 9.8
    CVE-2020-14750 Exploited Public exploit EPSS 99%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • High 7.2
    CVE-2020-14883 Exploited Public exploit EPSS 98%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-14864 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: In…

    Oracle Business Intelligence Enterprise Edition
    KEV Jan 18, 2022
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    Oracle Solaris Operating System
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14644 Exploited Public exploit EPSS 95%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2020-2883 Exploited Public exploit EPSS 95%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV Jan 7, 2025
  • Critical 9.8
    CVE-2020-2551 Exploited Public exploit EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppo…

    Oracle WebLogic Server
    KEV Nov 16, 2023
  • Critical 9.8
    CVE-2020-2555 Exploited Public exploit EPSS 97%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). S…

    Oracle WebCenter Portal Utilities Framework
    KEV Nov 3, 2021
  • High 8.8
    CVE-2019-3010 Exploited Public exploit EPSS 14%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …

    Oracle Solaris Operating System
    KEV May 25, 2022
  • High 7.5
    CVE-2019-2725 Exploited · Ransomware Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    Oracle Tape Library ACSLS
    KEV Jan 10, 2022
  • High 7.2
    CVE-2019-2616 Exploited Public exploit EPSS 92%

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publ…

    Oracle BI Publisher (formerly XML Publisher)
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2018-2628 Exploited Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …

    Oracle WebLogic Server
    KEV Sep 8, 2022
  • High 7.5
    CVE-2017-10271 Exploited · Ransomware Public exploit EPSS 100%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Support…

    Oracle WebLogic Server
    KEV Feb 10, 2022
  • High 7.4
    CVE-2017-3506 Exploited Public exploit EPSS 96%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    Oracle WebLogic Server
    KEV Jun 3, 2024