Oracle: 46 known exploited vulnerabilities

CVE-2026-21962 – Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in (added 2026-08-24)
CVE-2026-46817 – Oracle E-Business Suite (added 2026-07-15)
CVE-2026-35273 – Oracle PeopleSoft Enterprise PeopleTools (added 2026-06-12)
CVE-2024-21182 – Oracle WebLogic Server (added 2026-06-01)
CVE-2025-61757 – Oracle Fusion Middleware (added 2025-11-21)
CVE-2025-61884 – Oracle E-Business Suite (added 2025-10-20)
CVE-2025-61882 – Oracle E-Business Suite (added 2025-10-06)
CVE-2024-20953 – Oracle Agile Product Lifecycle Management (PLM) (added 2025-02-24)
CVE-2020-2883 – Oracle WebLogic Server (added 2025-01-07)
CVE-2024-21287 – Oracle Agile Product Lifecycle Management (PLM) (added 2024-11-21)
CVE-2022-21445 – Oracle ADF Faces (added 2024-09-18)
CVE-2020-14644 – Oracle WebLogic Server (added 2024-09-18)
CVE-2017-3506 – Oracle WebLogic Server (added 2024-06-03)
CVE-2020-2551 – Oracle Fusion Middleware (added 2023-11-16)
CVE-2016-3427 – Oracle Java SE and JRockit (added 2023-05-12)
CVE-2023-21839 – Oracle WebLogic Server (added 2023-05-01)
CVE-2022-21587 – Oracle E-Business Suite (added 2023-02-02)
CVE-2021-35587 – Oracle Fusion Middleware (added 2022-11-28)
CVE-2018-2628 – Oracle WebLogic Server (added 2022-09-08)
CVE-2019-3010 – Oracle Solaris (added 2022-05-25)
CVE-2013-2423 – Oracle Java Runtime Environment (JRE) (added 2022-05-25)
CVE-2013-0431 – Oracle Java Runtime Environment (JRE) (added 2022-05-25)
CVE-2013-0422 – Oracle Java Runtime Environment (JRE) (added 2022-05-25)
CVE-2012-1710 – Oracle Fusion Middleware (added 2022-05-25)
CVE-2010-0840 – Oracle Java Runtime Environment (JRE) (added 2022-05-25)
CVE-2013-2465 – Oracle Java SE (added 2022-03-28)
CVE-2012-5076 – Oracle Java SE (added 2022-03-28)
CVE-2012-0518 – Oracle Fusion Middleware (added 2022-03-28)
CVE-2019-2616 – Oracle BI Publisher (Formerly XML Publisher) (added 2022-03-25)
CVE-2015-4902 – Oracle Java SE (added 2022-03-03)
CVE-2015-2590 – Oracle Java SE (added 2022-03-03)
CVE-2012-4681 – Oracle Java SE (added 2022-03-03)
CVE-2012-1723 – Oracle Java SE (added 2022-03-03)
CVE-2012-0507 – Oracle Java SE (added 2022-03-03)
CVE-2011-3544 – Oracle Java SE JDK and JRE (added 2022-03-03)
CVE-2008-3431 – Oracle VirtualBox (added 2022-03-03)
CVE-2017-10271 – Oracle WebLogic Server (added 2022-02-10)
CVE-2020-14864 – Oracle Intelligence Enterprise Edition (added 2022-01-18)
CVE-2019-2725 – Oracle WebLogic Server (added 2022-01-10)
CVE-2020-2555 – Oracle Multiple Products (added 2021-11-03)
CVE-2020-14883 – Oracle WebLogic Server (added 2021-11-03)
CVE-2020-14882 – Oracle WebLogic Server (added 2021-11-03)
CVE-2020-14871 – Oracle Solaris and Zettabyte File System (ZFS) (added 2021-11-03)
CVE-2020-14750 – Oracle WebLogic Server (added 2021-11-03)
CVE-2015-4852 – Oracle WebLogic Server (added 2021-11-03)
CVE-2012-3152 – Oracle Fusion Middleware (added 2021-11-03)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).