Oracle known exploited vulnerabilities
The Beam CVE database tracks 46 known exploited vulnerabilities for Oracle: 30 critical, 12 high, 2 medium and 2 low severity. The newest is CVE-2026-35273, published Jun 11, 2026.
These are the Oracle vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 46
- Critical
- 30
- Known exploited (CISA KEV)
- 46
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-35273
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
critical9.8ExploitedJun 11, 2026CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
critical9.8ExploitedMay 28, 2026CVE-2026-21962
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
critical10.0ExploitedJan 20, 2026CVE-2025-61757
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
critical9.8ExploitedOct 21, 2025CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
high7.5ExploitedOct 12, 2025CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
critical9.8ExploitedOct 5, 2025CVE-2024-21287
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
high7.5ExploitedNov 18, 2024CVE-2024-21182
Oracle WebLogic Server Unspecified Vulnerability
high7.5ExploitedJul 16, 2024CVE-2024-20953
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
high8.8ExploitedFeb 17, 2024CVE-2023-21839
Oracle WebLogic Server Unspecified Vulnerability
high7.5ExploitedJan 18, 2023CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
critical9.8ExploitedOct 18, 2022CVE-2022-21445
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedApr 19, 2022CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedJan 19, 2022CVE-2020-14750
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedNov 2, 2020CVE-2020-14864
Oracle Business Intelligence Enterprise Edition Path Transversal
high7.5ExploitedOct 21, 2020CVE-2020-14871
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
critical10.0ExploitedOct 21, 2020CVE-2020-14882
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedOct 21, 2020CVE-2020-14883
Oracle WebLogic Server Unspecified Vulnerability
high7.2ExploitedOct 21, 2020CVE-2020-14644
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedJul 15, 2020CVE-2020-2883
Oracle WebLogic Server Unspecified Vulnerability
critical9.8ExploitedApr 15, 2020CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedJan 15, 2020CVE-2020-2555
Oracle Multiple Products Remote Code Execution Vulnerability
critical9.8ExploitedJan 15, 2020CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
high8.8ExploitedOct 16, 2019CVE-2019-2725
Oracle WebLogic Server, Injection
critical9.8ExploitedApr 26, 2019CVE-2019-2616
Oracle BI Publisher Unauthorized Access Vulnerability
high7.2ExploitedApr 23, 2019CVE-2018-2628
Oracle WebLogic Server Unspecified Vulnerability
critical9.8ExploitedApr 19, 2018CVE-2017-10271
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
high7.5ExploitedOct 19, 2017CVE-2017-3506
Oracle WebLogic Server OS Command Injection Vulnerability
high7.4ExploitedApr 24, 2017CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
critical9.8ExploitedApr 21, 2016CVE-2015-4852
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedNov 18, 2015CVE-2015-4902
Oracle Java SE Integrity Check Vulnerability
medium5.3ExploitedOct 22, 2015CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
critical9.8ExploitedJul 16, 2015CVE-2013-2465
Oracle Java SE Unspecified Vulnerability
critical9.8ExploitedJun 18, 2013CVE-2013-2423
Oracle JRE Unspecified Vulnerability
low3.7ExploitedApr 17, 2013CVE-2013-0431
Oracle JRE Sandbox Bypass Vulnerability
low3.7ExploitedJan 31, 2013CVE-2013-0422
Oracle JRE Remote Code Execution Vulnerability
critical9.8ExploitedJan 10, 2013CVE-2012-0518
Oracle Fusion Middleware Unspecified Vulnerability
medium4.7ExploitedOct 16, 2012CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability
critical9.1ExploitedOct 16, 2012CVE-2012-5076
Oracle Java SE Sandbox Bypass Vulnerability
critical9.8ExploitedOct 16, 2012CVE-2012-4681
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedAug 28, 2012CVE-2012-1723
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedJun 16, 2012CVE-2012-0507
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedJun 7, 2012CVE-2012-1710
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedMay 3, 2012CVE-2011-3544
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedOct 19, 2011CVE-2010-0840
Oracle JRE Unspecified Vulnerability
critical9.8ExploitedApr 1, 2010CVE-2008-3431
Oracle VirtualBox Insufficient Input Validation Vulnerability
high8.8ExploitedAug 5, 2008