Oracle — security advisories

55 advisories44 exploitedlatest 2026-07-09⚡ RSS feed

Tracked Oracle products:

⚡ Watch Oracle

Get an email when a new Oracle advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [medium] Oracle Java SE: Multiple vulnerabilities

mediumCVE-2026-20652 CVE-2026-22003 CVE-2026-22007 CVE-2026-22008cert-bund2026-07-09

[UPDATE] [medium] Oracle Java SE: Multiple vulnerabilities

mediumCVE-2025-12183 CVE-2025-43368 CVE-2025-47219 CVE-2025-6021cert-bund2026-07-02

Oracle security advisory (AV26-526) – Update 1

criticalCVE-2026-46817cccs2026-06-29

NCSC-2026-0207 [1.00] [M/H] Vulnerabilities fixed in Oracle Fusion Middleware products

criticalCVE-2026-46788 CVE-2026-46789 CVE-2026-46790 CVE-2026-46791ncsc-nl2026-06-17

NCSC-2026-0206 [1.00] [M/H] Vulnerabilities fixed in Oracle JD Edwards EnterpriseOne

unknownCVE-2026-46878 CVE-2026-46879 CVE-2026-46880 CVE-2026-46881ncsc-nl2026-06-17

NCSC-2026-0205 [1.00] [M/H] Vulnerabilities fixed in Oracle MySQL products

unknownCVE-2026-46850 CVE-2026-46860 CVE-2026-46861 CVE-2026-46862ncsc-nl2026-06-17

NCSC-2026-0204 [1.00] [M/H] Vulnerabilities fixed in Oracle PeopleSoft Enterprise

unknownCVE-2026-35271 CVE-2026-35272 CVE-2026-35274 CVE-2026-35276ncsc-nl2026-06-17

NCSC-2026-0203 [1.00] [M/H] Vulnerabilities fixed in Oracle VM VirtualBox

mediumCVE-2026-35275 CVE-2026-46768 CVE-2026-46815 CVE-2026-46816ncsc-nl2026-06-17

NCSC-2026-0202 [1.00] [M/H] Vulnerabilities fixed in Oracle Enterprise Manager

unknownCVE-2026-34481 CVE-2026-46832 CVE-2026-46852 CVE-2026-46853ncsc-nl2026-06-17

NCSC-2026-0201 [1.00] [M/H] Vulnerabilities fixed in Oracle E-Business Suite products

unknownCVE-2026-46949 CVE-2026-46950 CVE-2026-46951 CVE-2026-46952ncsc-nl2026-06-17

NCSC-2026-0200 [1.00] [M/H] Vulnerabilities fixed in Oracle Communications

unknownCVE-2025-70873 CVE-2026-34481ncsc-nl2026-06-17

NCSC-2026-0195 [1.00] [M/H] Vulnerability fixed in Oracle PeopleSoft Enterprise PeopleTools

unknownexploitedCVE-2026-35273ncsc-nl2026-06-12

CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

criticalexploitedCVE-2026-35273cisa-kev2026-06-12

CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability

criticalexploitedCVE-2024-21182cisa-kev2026-06-01

CVE-2025-61757: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

criticalexploitedCVE-2025-61757cisa-kev2025-11-21

CVE-2025-61884: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

criticalexploitedCVE-2025-61884cisa-kev2025-10-20

CVE-2025-61882: Oracle E-Business Suite Unspecified Vulnerability

criticalexploitedCVE-2025-61882cisa-kev2025-10-06

CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

criticalexploitedCVE-2024-20953cisa-kev2025-02-24

CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerability

criticalexploitedCVE-2020-2883cisa-kev2025-01-07

CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

criticalexploitedCVE-2024-21287cisa-kev2024-11-21

CVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerability

criticalexploitedCVE-2020-14644cisa-kev2024-09-18

CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2022-21445cisa-kev2024-09-18

CVE-2017-3506: Oracle WebLogic Server OS Command Injection Vulnerability

criticalexploitedCVE-2017-3506cisa-kev2024-06-03

CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerability

criticalexploitedCVE-2020-2551cisa-kev2023-11-16

CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability

criticalexploitedCVE-2016-3427cisa-kev2023-05-12

CVE-2023-21839: Oracle WebLogic Server Unspecified Vulnerability

criticalexploitedCVE-2023-21839cisa-kev2023-05-01

CVE-2022-21587: Oracle E-Business Suite Unspecified Vulnerability

criticalexploitedCVE-2022-21587cisa-kev2023-02-02

CVE-2021-35587: Oracle Fusion Middleware Unspecified Vulnerability

criticalexploitedCVE-2021-35587cisa-kev2022-11-28

CVE-2018-2628: Oracle WebLogic Server Unspecified Vulnerability

criticalexploitedCVE-2018-2628cisa-kev2022-09-08

CVE-2013-2423: Oracle JRE Unspecified Vulnerability

criticalexploitedCVE-2013-2423cisa-kev2022-05-25

CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability

criticalexploitedCVE-2013-0431cisa-kev2022-05-25

CVE-2019-3010: Oracle Solaris Privilege Escalation Vulnerability

criticalexploitedCVE-2019-3010cisa-kev2022-05-25

CVE-2010-0840: Oracle JRE Unspecified Vulnerability

criticalexploitedCVE-2010-0840cisa-kev2022-05-25

CVE-2013-0422: Oracle JRE Remote Code Execution Vulnerability

criticalexploitedCVE-2013-0422cisa-kev2022-05-25

CVE-2012-1710: Oracle Fusion Middleware Unspecified Vulnerability

criticalexploitedCVE-2012-1710cisa-kev2022-05-25

CVE-2012-5076: Oracle Java SE Sandbox Bypass Vulnerability

criticalexploitedCVE-2012-5076cisa-kev2022-03-28

CVE-2013-2465: Oracle Java SE Unspecified Vulnerability

criticalexploitedCVE-2013-2465cisa-kev2022-03-28

CVE-2012-0518: Oracle Fusion Middleware Unspecified Vulnerability

criticalexploitedCVE-2012-0518cisa-kev2022-03-28

CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability

criticalexploitedCVE-2019-2616cisa-kev2022-03-25

CVE-2012-4681: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2012-4681cisa-kev2022-03-03

CVE-2012-1723: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2012-1723cisa-kev2022-03-03

CVE-2011-3544: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2011-3544cisa-kev2022-03-03

CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability

criticalexploitedCVE-2015-4902cisa-kev2022-03-03

CVE-2015-2590: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

criticalexploitedCVE-2015-2590cisa-kev2022-03-03

CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation Vulnerability

criticalexploitedCVE-2008-3431cisa-kev2022-03-03

CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2012-0507cisa-kev2022-03-03

CVE-2020-14864: Oracle Business Intelligence Enterprise Edition Path Transversal

criticalexploitedCVE-2020-14864cisa-kev2022-01-18

CVE-2019-2725: Oracle WebLogic Server, Injection

criticalexploitedCVE-2019-2725cisa-kev2022-01-10

CVE-2020-2555: Oracle Multiple Products Remote Code Execution Vulnerability

criticalexploitedCVE-2020-2555cisa-kev2021-11-03

CVE-2020-14882: Oracle WebLogic Server Remote Code Execution Vulnerability

criticalexploitedCVE-2020-14882cisa-kev2021-11-03

CVE-2015-4852: Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2015-4852cisa-kev2021-11-03

CVE-2020-14750: Oracle WebLogic Server Remote Code Execution Vulnerability

criticalexploitedCVE-2020-14750cisa-kev2021-11-03

CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

criticalexploitedCVE-2020-14871cisa-kev2021-11-03

CVE-2020-14883: Oracle WebLogic Server Unspecified Vulnerability

criticalexploitedCVE-2020-14883cisa-kev2021-11-03

CVE-2012-3152: Oracle Fusion Middleware Unspecified Vulnerability

criticalexploitedCVE-2012-3152cisa-kev2021-11-03