Back to Trending CVEs
Oracle
45 vulnerabilities across 23 products
Emergency Fix
3
Fix Soon
1
Planned Fix
2
Avg CVSS
8.7
ADF FacesAgile Product Lifecycle Management (PLM)BI Publisher (Formerly XML Publisher)E-Business SuiteFusion MiddlewareIdentity ManagerIntelligence Enterprise EditionJava Runtime Environment (JRE)Java SEJava SE JDK and JREJava SE and JRockitMultiple ProductsMySQL ServerOpenJDK 7Oracle E-Business SuiteOracle HTTP ServerOracle Identity Manager; Oracle Web Services ManagerSolarisSolaris and Zettabyte File System (ZFS)VirtualBoxWebLogic ServerWebLogic Server Proxy Plug-in for Apache HTTP ServerWebLogic Server Proxy Plug-in for IIS
Emergency Fix
CVE-2013-2465Remote Code Execution in Oracle Java SE
RCE9.8
Emergency Fix
CVE-2025-61882Remote Code Execution in Oracle E-Business Suite
RCE9.8
Emergency Fix
CVE-2026-21962Unauthenticated Remote Code Execution in Oracle HTTP Server / WebLogic Proxy Plug-in (pre-auth)
RCE10.0
Fix Soon
CVE-2026-21992RCE in Oracle Identity Manager / Web Services Manager (unauthenticated)
RCE9.8
Planned Fix
CVE-2026-3547DoS in MySQL Server Pluggable Authentication
Unknown2.7
Planned Fix
CVE-2025-61757RCE via missing authentication in Oracle Identity Manager REST WebServices (pre-auth)
update9.8
CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
7.5
CVE-2018-2628Oracle WebLogic Server Unspecified Vulnerability
9.8
CVE-2013-2423Oracle JRE Unspecified Vulnerability
3.7
CVE-2020-2555Oracle Multiple Products Remote Code Execution Vulnerability
9.8
CVE-2012-3152Oracle Fusion Middleware Unspecified Vulnerability
9.1
CVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
9.8
CVE-2020-14882Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2012-0518Oracle Fusion Middleware Unspecified Vulnerability
4.7
CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability
7.2
CVE-2020-14644Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8
CVE-2020-2551Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
8.8
CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2023-21839Oracle WebLogic Server Unspecified Vulnerability
7.5
CVE-2020-14864Oracle Business Intelligence Enterprise Edition Path Transversal
7.5
CVE-2021-35587Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2019-2725Oracle WebLogic Server, Injection
9.8
CVE-2019-3010Oracle Solaris Privilege Escalation Vulnerability
8.8
CVE-2013-0431Oracle JRE Sandbox Bypass Vulnerability
5.3
CVE-2013-0422Oracle JRE Remote Code Execution Vulnerability
9.8
CVE-2012-1710Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2010-0840Oracle JRE Unspecified Vulnerability
9.8
CVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability
9.8
CVE-2015-4902Oracle Java SE Integrity Check Vulnerability
5.3
CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2012-4681Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8
CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8
CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8
CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
7.5
CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
10.0
CVE-2020-14750Oracle WebLogic Server Remote Code Execution Vulnerability
9.8
CVE-2020-14883Oracle WebLogic Server Unspecified Vulnerability
7.2
CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
8.8
CVE-2020-2883Oracle WebLogic Server Unspecified Vulnerability
9.8
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
7.5
CVE-2017-3506Oracle WebLogic Server OS Command Injection Vulnerability
7.4
CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
9.8
CVE-2022-21587Oracle E-Business Suite Unspecified Vulnerability
9.8