Oracle Corporation vulnerabilities

CVEs per yearBy the year they were published

1. 2017621
2. 2018693
3. 2019611
4. 2020810
5. 2021586
6. 2022416
7. 2023295
8. 2024370
9. 2025313
10. 20264,155

Known exploitedNewest addition to KEV first

• CVE-2026-21962

  Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for…

  Oracle Corporation · Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in

  ExploitedCritical10.0
• CVE-2026-46817

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are…

  Oracle Corporation · Oracle Payments

  ExploitedCritical9.8
• CVE-2026-35273

  Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are…

  Oracle Corporation · PeopleSoft Enterprise PeopleTools

  ExploitedCritical9.8
• CVE-2024-21182

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and…

  Oracle Corporation · WebLogic Server

  ExploitedHigh7.5
• CVE-2025-61757

  Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0…

  Oracle Corporation · Identity Manager

  ExploitedCritical9.8
• CVE-2025-61884

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14.…

  Oracle Corporation · Oracle Configurator

  ExploitedHigh7.5
• CVE-2025-61882

  Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are…

  Oracle Corporation · Oracle Concurrent Processing

  ExploitedCritical9.8
• CVE-2024-20953

  Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable…

  Oracle Corporation · Agile PLM Framework

  ExploitedHigh8.8
• CVE-2020-2883

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0,…

  Oracle Corporation · WebLogic Server

  ExploitedCritical9.8
• CVE-2024-21287

  Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version…

  Oracle Corporation · Oracle Agile PLM Framework

  ExploitedHigh7.5

Newest CVEs

• CVE-2026-114820

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…

  Oracle Corporation · Oracle Java SE

  Critical9.1
• CVE-2026-91403

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions…

  Oracle Corporation · Oracle Java SE

  Critical9.1
• CVE-2026-91668

  Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are…

  Oracle Corporation · Oracle Data Integrator

  High8.8
• CVE-2026-91665

  Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…

  Oracle Corporation · Oracle Essbase

  Critical9.8
• CVE-2026-91664

  Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…

  Oracle Corporation · Oracle Essbase

  High7.5
• CVE-2026-91663

  Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…

  Oracle Corporation · Oracle Essbase

  Critical9.9
• CVE-2026-91662

  Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…

  Oracle Corporation · Oracle Essbase

  Medium6.4
• CVE-2026-91661

  Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…

  Oracle Corporation · Oracle Essbase

  High7.7
• CVE-2026-91660

  Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…

  Oracle Corporation · Oracle Essbase

  Medium4.3
• CVE-2026-91659

  Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…

  Oracle Corporation · Oracle Essbase

  High7.7