Vendor
Oracle: actively exploited vulnerabilities
46 vulnerabilities in Oracle products are listed in CISA’s catalog of actively exploited vulnerabilities, 13 of them used by ransomware. Latest addition on August 24, 2026: CVE-2026-21962 (HTTP Server and Oracle Weblogic Server Proxy Plug-in).
- 46 exploited vulnerabilities in the catalog
- 6 added in the last 12 months
- 13 used by ransomware
- 17 products affected
Affected products
- WebLogic Server12
- Java SE7
- Fusion Middleware6
- E-Business Suite4
- Java Runtime Environment (JRE)4
- Agile Product Lifecycle Management (PLM)2
- ADF Faces1
- BI Publisher (Formerly XML Publisher)1
- HTTP Server and Oracle Weblogic Server Proxy Plug-in1
- Intelligence Enterprise Edition1
- Java SE and JRockit1
- Java SE JDK and JRE1
- Multiple Products1
- PeopleSoft Enterprise PeopleTools1
- Solaris1
- Solaris and Zettabyte File System (ZFS)1
- VirtualBox1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 4 vulnerabilities
-
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
-
CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability
-
CVE-2026-35273Used by ransomwareOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
-
CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability
2025 5 vulnerabilities
-
CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
-
CVE-2025-61884Used by ransomwareOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
-
CVE-2025-61882Used by ransomwareOracle E-Business Suite Unspecified Vulnerability
-
CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
-
CVE-2020-2883Oracle WebLogic Server Unspecified Vulnerability
2024 4 vulnerabilities
-
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
-
CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
-
CVE-2020-14644Oracle WebLogic Server Remote Code Execution Vulnerability
-
CVE-2017-3506Oracle WebLogic Server OS Command Injection Vulnerability
2023 4 vulnerabilities
-
CVE-2020-2551Oracle Fusion Middleware Unspecified Vulnerability
-
CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability
-
CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability
-
CVE-2022-21587Used by ransomwareOracle E-Business Suite Unspecified Vulnerability
2022 22 vulnerabilities
-
CVE-2021-35587Oracle Fusion Middleware Unspecified Vulnerability
-
CVE-2018-2628Oracle WebLogic Server Unspecified Vulnerability
-
CVE-2019-3010Oracle Solaris Privilege Escalation Vulnerability
-
CVE-2013-2423Oracle JRE Unspecified Vulnerability
-
CVE-2013-0431Used by ransomwareOracle JRE Sandbox Bypass Vulnerability
-
CVE-2013-0422Used by ransomwareOracle JRE Remote Code Execution Vulnerability
-
CVE-2012-1710Used by ransomwareOracle Fusion Middleware Unspecified Vulnerability
-
CVE-2010-0840Oracle JRE Unspecified Vulnerability
-
CVE-2013-2465Used by ransomwareOracle Java SE Unspecified Vulnerability
-
CVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability
-
CVE-2012-0518Oracle Fusion Middleware Unspecified Vulnerability
-
CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability
-
CVE-2015-4902Oracle Java SE Integrity Check Vulnerability
-
CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
-
CVE-2012-4681Used by ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
-
CVE-2012-1723Used by ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
-
CVE-2012-0507Used by ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
-
CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
-
CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
-
CVE-2017-10271Used by ransomwareOracle Corporation WebLogic Server Remote Code Execution Vulnerability
-
CVE-2020-14864Oracle Business Intelligence Enterprise Edition Path Transversal
-
CVE-2019-2725Used by ransomwareOracle WebLogic Server, Injection
2021 7 vulnerabilities
-
CVE-2020-2555Oracle Multiple Products Remote Code Execution Vulnerability
-
CVE-2020-14883Oracle WebLogic Server Unspecified Vulnerability
-
CVE-2020-14882Oracle WebLogic Server Remote Code Execution Vulnerability
-
CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
-
CVE-2020-14750Oracle WebLogic Server Remote Code Execution Vulnerability
-
CVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
-
CVE-2012-3152Oracle Fusion Middleware Unspecified Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.