Oracle: every exploited CVE on CISA KEV
All 46 Oracle bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
46
Oracle bugs on CISA’s exploited list
4 added in 2026.
13
are linked to ransomware
Every Oracle vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-08-24 | CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 0.73 | 0.97 | None yet | No |
| 2026-07-15 | CVE-2026-46817 | Oracle E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 0.12 | 0.54 | None yet | No |
| 2026-06-12 | CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | Yes |
| 2026-06-01 | CVE-2024-21182 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 0.74 | 0.83 | None yet | No |
| 2025-11-21 | CVE-2025-61757 | Oracle Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 0.89 | 0.99 | Nuclei · Suricata | No |
| 2025-10-20 | CVE-2025-61884 | Oracle E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | Yes |
| 2025-10-06 | CVE-2025-61882 | Oracle E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2025-02-24 | CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 0.04 | 0.98 | None yet | No |
| 2025-01-07 | CVE-2020-2883 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 0.95 | 0.98 | None yet | No |
| 2024-11-21 | CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 0.02 | 0.74 | None yet | No |
| 2024-09-18 | CVE-2022-21445 | Oracle ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 0.62 | 0.98 | None yet | No |
| 2024-09-18 | CVE-2020-14644 | Oracle WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 0.95 | 0.99 | None yet | No |
| 2024-06-03 | CVE-2017-3506 | Oracle WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | No |
| 2023-11-16 | CVE-2020-2551 | Oracle Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 0.93 | 0.99 | Nuclei · Suricata | No |
| 2023-05-12 | CVE-2016-3427 | Oracle Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | 0.92 | 0.98 | None yet | No |
| 2023-05-01 | CVE-2023-21839 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 1.00 | 0.99 | None yet | No |
| 2023-02-02 | CVE-2022-21587 | Oracle E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 0.98 | 0.99 | Nuclei · Suricata | Yes |
| 2022-11-28 | CVE-2021-35587 | Oracle Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 0.96 | 0.98 | Nuclei · Suricata | No |
| 2022-09-08 | CVE-2018-2628 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2022-05-25 | CVE-2019-3010 | Oracle Solaris | Oracle Solaris Privilege Escalation Vulnerability | 0.14 | 0.98 | Out of scope (local) | No |
| 2022-05-25 | CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 0.85 | 0.98 | None yet | No |
| 2022-05-25 | CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | 0.90 | 0.99 | None yet | Yes |
| 2022-05-25 | CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | 0.97 | 0.99 | None yet | Yes |
| 2022-05-25 | CVE-2012-1710 | Oracle Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 0.08 | 0.75 | None yet | Yes |
| 2022-05-25 | CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 0.96 | 0.99 | None yet | No |
| 2022-03-28 | CVE-2013-2465 | Oracle Java SE | Oracle Java SE Unspecified Vulnerability | 0.99 | 0.98 | None yet | Yes |
| 2022-03-28 | CVE-2012-5076 | Oracle Java SE | Oracle Java SE Sandbox Bypass Vulnerability | 0.91 | 0.99 | None yet | No |
| 2022-03-28 | CVE-2012-0518 | Oracle Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 0.05 | 0.74 | None yet | No |
| 2022-03-25 | CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | 0.92 | 0.99 | Nuclei · Suricata | No |
| 2022-03-03 | CVE-2015-4902 | Oracle Java SE | Oracle Java SE Integrity Check Vulnerability | 0.14 | 0.54 | None yet | No |
| 2022-03-03 | CVE-2015-2590 | Oracle Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 0.25 | 0.93 | None yet | No |
| 2022-03-03 | CVE-2012-4681 | Oracle Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 0.99 | 0.98 | None yet | Yes |
| 2022-03-03 | CVE-2012-1723 | Oracle Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 0.94 | 0.99 | None yet | Yes |
| 2022-03-03 | CVE-2012-0507 | Oracle Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 0.98 | 0.99 | None yet | Yes |
| 2022-03-03 | CVE-2011-3544 | Oracle Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 0.97 | 0.99 | None yet | No |
| 2022-03-03 | CVE-2008-3431 | Oracle VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | 0.07 | 0.98 | Out of scope (local) | No |
| 2022-02-10 | CVE-2017-10271 | Oracle WebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2022-01-18 | CVE-2020-14864 | Oracle Intelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | 0.97 | 0.98 | Nuclei · Suricata | No |
| 2022-01-10 | CVE-2019-2725 | Oracle WebLogic Server | Oracle WebLogic Server, Injection | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2020-2555 | Oracle Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | 0.97 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-14883 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 0.98 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-14882 | Oracle WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 0.80 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-14750 | Oracle WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2015-4852 | Oracle WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 0.95 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2012-3152 | Oracle Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 0.99 | 0.98 | None yet | No |
Industry partners
