News stories · 30d
2
Advisories · 30d
1
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-08-24 | CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | |
| 2026-07-15 | CVE-2026-46817 | E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | |
| 2026-06-12 | CVE-2026-35273 | PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Known |
| 2026-06-01 | CVE-2024-21182 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | |
| 2025-11-21 | CVE-2025-61757 | Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | |
| 2025-10-20 | CVE-2025-61884 | E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | Known |
| 2025-10-06 | CVE-2025-61882 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Known |
| 2025-02-24 | CVE-2024-20953 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | |
| 2025-01-07 | CVE-2020-2883 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | |
| 2024-11-21 | CVE-2024-21287 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | |
| 2024-09-18 | CVE-2020-14644 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | |
| 2024-09-18 | CVE-2022-21445 | ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | |
| 2024-06-03 | CVE-2017-3506 | WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | |
| 2023-11-16 | CVE-2020-2551 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | |
| 2023-05-12 | CVE-2016-3427 | Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | |
| 2023-05-01 | CVE-2023-21839 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | |
| 2023-02-02 | CVE-2022-21587 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Known |
| 2022-11-28 | CVE-2021-35587 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | |
| 2022-09-08 | CVE-2018-2628 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | |
| 2022-05-25 | CVE-2019-3010 | Solaris | Oracle Solaris Privilege Escalation Vulnerability | |
| 2022-05-25 | CVE-2013-2423 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | |
| 2022-05-25 | CVE-2013-0431 | Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | Known |
| 2022-05-25 | CVE-2013-0422 | Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | Known |
| 2022-05-25 | CVE-2012-1710 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Known |
| 2022-05-25 | CVE-2010-0840 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability |
CVEs in the news
Timeline (last 30 days)
- CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET — AWS Security Bulletins, 2026-10-14
- Oracle Health Data Breach Tally Climbs to Nearly 20 Million — SecurityWeek, 2026-10-08
- ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft — Google Threat Intelligence, 2026-09-25