Vendor
Oracle
46 of 154 Oracle CVEs in Patchfirst (30%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild, 13 of them used by ransomware.
- CVEs
- 154
- In CISA KEV
- 4630%
- Known ransomware use
- 13
- Median days to KEV
- 1,464
- from publication
- Latest KEV listing
- 24 Aug 2026
Products
In KEVOther CVEs
- WebLogic Server In KEV: 12 CVEs: 26
- Java SE In KEV: 7 CVEs: 7
- Fusion Middleware In KEV: 6 CVEs: 6
- E-Business Suite In KEV: 4 CVEs: 4
- Java Runtime Environment (JRE) In KEV: 4 CVEs: 4
- Agile Product Lifecycle Management (PLM) In KEV: 2 CVEs: 2
- Java SE JDK and JRE In KEV: 1 CVEs: 2
- ADF Faces In KEV: 1 CVEs: 1
- BI Publisher (Formerly XML Publisher) In KEV: 1 CVEs: 1
- PeopleSoft Enterprise PeopleTools In KEV: 1 CVEs: 1
Top ATT&CK techniques
What attackers do with Oracle CVEs- T1190Exploit Public-Facing Application CVEs: 37
- T1059Command and Scripting Interpreter CVEs: 19
- T1005Data from Local System CVEs: 8
- T1078Valid Accounts CVEs: 6
- T1068Exploitation for Privilege Escalation CVEs: 5
Counts are Oracle CVEs linked to the technique. Each link’s provenance is on the CVE page.
Oracle CVEs
Top 100 of 154 by priority- CVE-2019-2725Oracle WebLogic Server, InjectionOracle · WebLogic ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports>99.9%Top 0.02%88.8priority
- CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reports98.2%Top 0.09%86.0priority
- CVE-2010-0840Oracle JRE Unspecified VulnerabilityOracle · Java Runtime Environment (JRE)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports96.3%Top 0.12%86.0priority
- CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityOracle · PeopleSoft Enterprise PeopleToolsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts96.7%Top 0.12%84.8priority
- CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts88.6%Top 0.23%84.8priority
- CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityOracle · WebLogic ServerKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation2 reports>99.9%Top 0.01%84.4priority
- CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityOracle · E-Business SuiteKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation12.3%Top 3.8%84.1priority
- CVE-2025-61882Oracle E-Business Suite Unspecified VulnerabilityOracle · E-Business SuiteKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts99.7%Top 0.05%79.9priority
- CVE-2022-21587Oracle E-Business Suite Unspecified VulnerabilityOracle · E-Business SuiteKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts98.3%Top 0.08%79.8priority
- CVE-2013-2465Oracle Java SE Unspecified Vulnerability98.8%Top 0.07%79.8priority
- CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityOracle · E-Business SuiteKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System95.9%Top 0.13%78.2priority
- CVE-2008-3431Oracle VirtualBox Insufficient Input Validation VulnerabilityOracle · VirtualBoxKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation6.9%Top 5.9%78.0priority
- CVE-2019-2729Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)Oracle Corporation · WebLogic ServerPublic exploitCritical · 9.888.8%Top 0.22%77.9priority
- CVE-2021-2109Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console)Oracle Corporation · WebLogic ServerPublic exploitHigh · 7.271.1%Top 0.59%76.5priority
- CVE-2018-2894Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)Oracle Corporation · WebLogic ServerPublic exploit1 report50.2%Top 1.1%76.3priority
- CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityOracle · HTTP Server and Oracle Weblogic Server Proxy Plug-inKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1005Data from Local System73.2%Top 0.54%74.9priority
- CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports93.6%Top 0.16%73.8priority
- CVE-2012-1710Oracle Fusion Middleware Unspecified Vulnerability7.8%Top 5.3%73.8priority
- CVE-2021-35587Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report96.3%Top 0.12%73.7priority
- CVE-2020-14882Oracle WebLogic Server Remote Code Execution VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report>99.9%Top 0.01%73.7priority
- CVE-2020-2551Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1210Exploitation of Remote Services1 report92.8%Top 0.17%73.7priority
- CVE-2012-3152Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report98.8%Top 0.07%73.2priority
- CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityOracle · WebLogic ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System74.2%Top 0.51%73.1priority
- CVE-2023-21839Oracle WebLogic Server Unspecified VulnerabilityOracle · WebLogic ServerKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report99.9%Top 0.03%72.1priority
- CVE-2025-53072Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)Oracle Corporation · Oracle MarketingPublic exploitCritical · 9.80.6%Top 49%72.0priority
- CVE-2013-0422Oracle JRE Remote Code Execution VulnerabilityOracle · Java Runtime Environment (JRE)KEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting Interpreter2 reports97.0%Top 0.11%71.0priority
- CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability25.5%Top 2%70.6priority
- CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityOracle · Solaris and Zettabyte File System (ZFS)KEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation+1 more80.2%Top 0.38%69.9priority
- CVE-2018-2628Oracle WebLogic Server Unspecified VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter>99.9%Top 0.02%69.9priority
- CVE-2020-14750Oracle WebLogic Server Remote Code Execution VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter99.2%Top 0.06%69.8priority
- CVE-2020-14644Oracle WebLogic Server Remote Code Execution VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter94.5%Top 0.15%69.8priority
- CVE-2020-2883Oracle WebLogic Server Unspecified VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter94.6%Top 0.14%69.8priority
- CVE-2020-2555Oracle Multiple Products Remote Code Execution VulnerabilityOracle · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter97.1%Top 0.11%69.8priority
- CVE-2015-4852Oracle WebLogic Server Deserialization of Untrusted Data VulnerabilityOracle · WebLogic ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter95.0%Top 0.14%69.8priority
- CVE-2022-21445Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityOracle · ADF FacesKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter62.5%Top 0.81%69.7priority
- CVE-2026-101767Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)Oracle Corporation · Oracle Application Object LibraryPublic exploitCritical · 9.80.6%Top 51%68.9priority
- CVE-2012-4681Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SEKEVRansomwarePublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting Interpreter1 report98.5%Top 0.08%68.7priority
- CVE-2019-3010Oracle Solaris Privilege Escalation VulnerabilityOracle · SolarisKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation13.4%Top 3.6%68.4priority
- CVE-2020-14864Oracle Business Intelligence Enterprise Edition Path TransversalOracle · Intelligence Enterprise EditionKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System97.2%Top 0.1%68.2priority
- CVE-2017-3506Oracle WebLogic Server OS Command Injection VulnerabilityOracle · WebLogic ServerKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1005Data from Local System96.0%Top 0.12%68.2priority
- CVE-2020-14883Oracle WebLogic Server Unspecified VulnerabilityOracle · WebLogic ServerKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter97.7%Top 0.1%68.0priority
- CVE-2019-2616Oracle BI Publisher Unauthorized Access VulnerabilityOracle · BI Publisher (Formerly XML Publisher)KEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1213Data from Information Repositories+1 more92.2%Top 0.18%68.0priority
- CVE-2020-14756Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components)Oracle Corporation · Utilities FrameworkPublic exploitCritical · 9.874.8%Top 0.5%67.4priority
- CVE-2025-62481Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)Oracle Corporation · Oracle MarketingCritical · 9.80.6%Top 51%67.3priority
- CVE-2021-2135Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container)Oracle Corporation · WebLogic ServerPublic exploitCritical · 9.88.4%Top 5%66.9priority
- CVE-2022-21371Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container)Oracle Corporation · WebLogic ServerPublic exploitHigh · 7.592.6%Top 0.17%66.3priority
- CVE-2022-21500Vulnerability in Oracle E-Business Suite (component: Manage Proxies)Oracle Corporation · User ManagementPublic exploitHigh · 7.571.7%Top 0.58%65.8priority
- CVE-2023-22069Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)Oracle Corporation · WebLogic ServerCritical · 9.80.9%Top 41%65.0priority
- CVE-2015-4902Oracle Java SE Integrity Check Vulnerability13.6%Top 3.5%64.9priority
- CVE-2016-3427Oracle Java SE and JRockit Unspecified VulnerabilityOracle · Java SE and JRockitKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter92.3%Top 0.18%64.8priority
- CVE-2012-5076Oracle Java SE Sandbox Bypass VulnerabilityOracle · Java SEKEVPublic exploitEnd of lifeCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter91.3%Top 0.19%64.8priority
- CVE-2023-21932Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications…Oracle Corporation · Hospitality OPERA 5 Property ServicesHigh · 7.21 report45.0%Top 1.2%64.7priority
- CVE-2013-2423Oracle JRE Unspecified VulnerabilityOracle · Java Runtime Environment (JRE)KEVPublic exploitEnd of lifeLow · 3.7T1211Exploitation for Stealth1 report85.2%Top 0.29%64.4priority
- CVE-2025-21535Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)Oracle Corporation · Oracle WebLogic ServerCritical · 9.80.8%Top 43%63.3priority
- CVE-2024-21136Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security)Oracle Corporation · Retail Xstore OfficePublic exploitHigh · 8.61.8%Top 22%62.4priority
- CVE-2018-2893Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)Oracle Corporation · WebLogic ServerPublic exploit70.3%Top 0.62%62.4priority
- CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityOracle · Agile Product Lifecycle Management (PLM)KEVHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter3.9%Top 9.6%62.2priority
- CVE-2026-21992Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and…Oracle Corporation · Oracle Identity ManagerCritical · 9.81.0%Top 36%62.0priority
- CVE-2017-3623Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC)Oracle Corporation · Solaris Operating SystemPublic exploit22.5%Top 2.3%60.6priority
- CVE-2013-0431Oracle JRE Sandbox Bypass VulnerabilityOracle · Java Runtime Environment (JRE)KEVRansomwarePublic exploitEnd of lifeLow · 3.7T1211Exploitation for Stealth90.1%Top 0.2%60.5priority
- CVE-2019-2618Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)Oracle Corporation · WebLogic ServerPublic exploit32.9%Top 1.6%59.7priority
- CVE-2019-2588Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI…Oracle Corporation · BI Publisher (formerly XML Publisher)Public exploit36.5%Top 1.5%59.7priority
- CVE-2012-0518Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVMedium · 4.7T1189Drive-by CompromiseT1565.002Transmitted Data Manipulation4.7%Top 8.2%59.6priority
- CVE-2019-2767Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI…Oracle Corporation · BI Publisher (formerly XML Publisher)Public exploit5.2%Top 7.5%59.2priority
- CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityOracle · Agile Product Lifecycle Management (PLM)KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1.7%Top 23%58.7priority
- CVE-2017-3622Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment…Oracle Corporation · Solaris Operating SystemPublic exploit5.3%Top 7.4%58.5priority
- CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityOracle · Java SE JDK and JREKEVPublic exploitEnd of lifeCritical · 9.8T1059Command and Scripting Interpreter96.7%Top 0.12%54.8priority
- CVE-2022-21589Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)Oracle Corporation · MySQL ServerMedium · 4.31.1%Top 34%51.3priority
- CVE-2019-2768Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI…Oracle Corporation · BI Publisher (formerly XML Publisher)1.7%Top 23%50.5priority
- CVE-2022-21449Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)Oracle Corporation · Java SE JDK and JREPublic exploitHigh · 7.577.2%Top 0.45%31.9priority
- CVE-2021-2456Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component…Oracle Corporation · Business Intelligence Enterprise EditionPublic exploitCritical · 9.881.4%Top 0.36%31.8priority
- CVE-2021-2394Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)Oracle Corporation · WebLogic ServerPublic exploitCritical · 9.876.4%Top 0.46%31.8priority
- CVE-2024-20931Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)Oracle Corporation · WebLogic ServerPublic exploitHigh · 7.559.7%Top 0.87%31.7priority
- CVE-2023-22047Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)Oracle Corporation · PeopleSoft Enterprise PT PeopleToolsPublic exploitHigh · 7.577.0%Top 0.45%30.8priority
- CVE-2023-21931Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)Oracle Corporation · WebLogic ServerPublic exploitHigh · 7.582.4%Top 0.34%30.2priority
- CVE-2021-2198Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin)Oracle Corporation · Knowledge ManagementHigh · 8.279.9%Top 0.39%26.7priority
- CVE-2020-2950Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component…Oracle Corporation · Oracle Business Intelligence Enterprise EditionCritical · 9.871.0%Top 0.6%26.7priority
- CVE-2017-3248Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components)Oracle · WebLogic ServerPublic exploit97.3%Top 0.1%26.3priority
- CVE-2021-2114Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications…Oracle Corporation · Common Applications CalendarHigh · 8.259.3%Top 0.88%25.6priority
- CVE-2020-2871Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface)Oracle Corporation · Advanced Outbound TelephonyHigh · 8.266.2%Top 0.72%25.6priority
- CVE-2020-2854Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface)Oracle Corporation · Advanced Outbound TelephonyHigh · 8.266.2%Top 0.72%25.6priority
- CVE-2020-2852Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar)Oracle Corporation · Advanced Outbound TelephonyHigh · 8.266.2%Top 0.72%25.6priority
- CVE-2021-2400Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO)Oracle Corporation · BI Publisher (formerly XML Publisher)High · 7.583.3%Top 0.32%25.2priority
- CVE-2021-2190Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template)Oracle Corporation · Sales OfflineHigh · 7.592.9%Top 0.17%25.2priority
- CVE-2022-21490Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)Oracle Corporation · MySQL ClusterMedium · 6.379.4%Top 0.4%25.0priority
- CVE-2022-21489Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)Oracle Corporation · MySQL ClusterMedium · 6.378.9%Top 0.41%25.0priority
- CVE-2018-3245Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)Oracle Corporation · WebLogic ServerPublic exploit94.3%Top 0.15%25.0priority
- CVE-2019-2578Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)Oracle Corporation · WebCenter SitesPublic exploit71.2%Top 0.59%24.9priority
- CVE-2018-3191Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)Oracle Corporation · WebLogic ServerPublic exploit62.9%Top 0.8%24.8priority
- CVE-2021-35590Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)Oracle Corporation · MySQL ClusterMedium · 6.388.5%Top 0.23%24.4priority
- CVE-2022-21280Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)Oracle Corporation · MySQL ClusterMedium · 6.376.5%Top 0.46%24.3priority
- CVE-2022-21279Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)Oracle Corporation · MySQL ClusterMedium · 6.379.0%Top 0.41%24.3priority
- CVE-2021-2401Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO)Oracle Corporation · BI Publisher (formerly XML Publisher)Medium · 5.384.8%Top 0.29%23.7priority
- CVE-2026-91403Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…Oracle Corporation · Oracle Java SEPublic exploitCritical · 9.10.4%Top 69%19.7priority
- CVE-2026-101521Vulnerability in Oracle APEX (component: General)Oracle Corporation · Oracle APEXCritical · 9.80.6%Top 52%18.3priority
- CVE-2026-101809Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)Oracle Corporation · WorkflowCritical · 10.00.5%Top 55%18.0priority
- CVE-2026-101499Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)Oracle Corporation · Oracle WebCenter SitesCritical · 9.80.5%Top 55%17.8priority
- CVE-2026-101484Vulnerability in Oracle Secure Backup (component: Backup and Restore)Oracle Corporation · Oracle Secure BackupCritical · 9.80.5%Top 55%17.8priority
- CVE-2026-101634Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations)Oracle Corporation · Oracle Mobile Field ServiceCritical · 9.10.6%Top 53%17.6priority
- CVE-2026-101763Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component…Oracle Corporation · Oracle Communications BRM - Elastic Charging EngineCritical · 9.80.5%Top 57%17.4priority