Oracle Corporation vulnerabilities
8,870 published CVEs name Oracle Corporation among the affected products; CISA lists 28 of them as exploited in the wild.
- 8,870Published CVEs8,870 of them scored
- 4,155Last 12 monthspublished in the last year
- 846Critical3,478 more rated high
- 28Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-21962
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for…
Oracle Corporation · Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in
ExploitedCritical10.0 - CVE-2026-46817
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are…
Oracle Corporation · Oracle Payments
ExploitedCritical9.8 - CVE-2026-35273
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are…
Oracle Corporation · PeopleSoft Enterprise PeopleTools
ExploitedCritical9.8 - CVE-2024-21182
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…
Oracle Corporation · WebLogic Server
ExploitedHigh7.5 - CVE-2025-61757
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0…
Oracle Corporation · Identity Manager
ExploitedCritical9.8 - CVE-2025-61884
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14.…
Oracle Corporation · Oracle Configurator
ExploitedHigh7.5 - CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are…
Oracle Corporation · Oracle Concurrent Processing
ExploitedCritical9.8 - CVE-2024-20953
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable…
Oracle Corporation · Agile PLM Framework
ExploitedHigh8.8 - CVE-2020-2883
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0,…
Oracle Corporation · WebLogic Server
ExploitedCritical9.8 - CVE-2024-21287
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version…
Oracle Corporation · Oracle Agile PLM Framework
ExploitedHigh7.5