Vendor
Oracle vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 2,477 vulnerabilities in Oracle: 0 in the last 7 days and 1,931 in the last 90 days, 495 of them critical and 46 exploited in the wild. The most recent, CVE-2026-83408, was published on 15 September 2026. 191 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 1,931
- Critical, all time
- 495
- Exploited in the wild
- 46
About Oracle
Oracle Corporation is an enterprise software vendor providing databases, cloud services, and business applications.
Oracle technologies
- Oracle Hyperion Financial Management129
- Oracle Coherence113
- Oracle E-Business Suite83
- Oracle Commerce Guided Search82
- Oracle Commerce Experience Manager81
- Oracle WebCenter Content73
- Oracle VirtualBox70
- Oracle Helidon68
- Oracle MySQL Server60
- Oracle Hyperion Data Relationship Management56
- Oracle WebLogic Server55
- Oracle Java SE52
- Oracle MySQL Cluster49
- Oracle Advanced Outbound Telephony44
- Oracle WebCenter Portal41
- Oracle Enterprise Manager Base Platform38
- Oracle Access Manager36
- Oracle WebCenter Enterprise Capture36
- Oracle Siebel CRM34
- Oracle Business Intelligence Enterprise Edition33
- Oracle WebCenter Sites28
- Oracle Agile PLM26
- Oracle PeopleSoft Enterprise PeopleTools26
- Oracle Unified Directory25
- Oracle BI Publisher24
- Oracle Service Delivery Platform23
- Oracle Siebel CRM Cloud Applications22
- Oracle Marketing21
- Oracle GraalVM Enterprise Edition20
- Oracle GraalVM for JDK20
- Oracle JD Edwards EnterpriseOne Tools20
- Oracle One-to-One Fulfillment20
- Oracle Siebel CRM Deployment20
- Oracle Agile Engineering Data Management19
- Oracle JDeveloper19
- Oracle Product Hub18
- Oracle WebCenter Content: Imaging17
- Oracle Platform Security for Java16
- Oracle Solaris16
- Oracle Agile Product Lifecycle Management15
- Oracle Application Testing Suite15
- Oracle Enterprise Command Center Framework15
- Oracle Identity Manager Connector14
- Oracle Java SE Embedded14
- Oracle JRockit14
- Oracle FLEXCUBE Universal Banking13
- Oracle Payroll13
- Oracle GoldenGate12
- Oracle iSupport12
- Oracle PeopleSoft Enterprise CS Campus Community12
- Oracle Internet Directory11
- Oracle TimesTen In-Memory Database11
- Oracle Application Object Library10
- Oracle Commerce Platform10
- Oracle HRMS (UK)10
- Oracle Rest-Data-Services10
- Oracle Time and Labor10
- Oracle Agile Product Lifecycle Management for Process9
- Oracle Contracts Integration9
- Oracle Data Integrator9
- Oracle Outside In Technology9
- Oracle Payments9
- Oracle Production Scheduling9
- Oracle Universal-Work-Queue9
- Oracle FLEXCUBE Private Banking8
- Oracle Knowledge Management8
- Oracle PeopleSoft Enterprise PT PeopleTools8
- Oracle Public Sector Financials8
- Oracle Siebel CRM Integration8
- Oracle SOA Suite8
- Oracle Work in Process8
- Oracle Workflow8
- Oracle Advanced-Benefits7
- Oracle Applications Framework7
- Oracle Bills of Material7
- Oracle Enterprise Asset Management7
- Oracle FLEXCUBE Investor Servicing7
- Oracle Fusion Middleware7
- Oracle HRMS (US)7
- Oracle Hyperion Profitability7
- Oracle Hyperion Profitability and Cost Management7
- Oracle iRecruitment7
- Oracle Order Management7
- Oracle PeopleSoft Enterprise FIN Common Objects Argentina7
- Oracle PeopleSoft Enterprise FIN Common Objects Brazil7
- Oracle Price Protection7
- Oracle Project Portfolio Analysis7
- Oracle Purchasing7
- Oracle Autonomous Health Framework6
- Oracle E-Business Suite Bills of Material6
- Oracle E-Business Suite HRMS (US)6
- Oracle EDI Gateway6
- Oracle Graalvm6
- Oracle Installed Base6
- Oracle iStore6
- Oracle PeopleSoft Enterprise Campus Solutions Student Records6
- Oracle Product Lifecycle Analytics6
- Oracle Product Workbench6
- Oracle Complex Maintenance, Repair and Overhaul5
- Oracle Connector/J5
- Oracle E-Business Suite Product Hub5
- Oracle GlassFish Server5
- Oracle Human Resources5
- Oracle Jdk5
- Oracle JRE5
- Oracle Labor Distribution5
- Oracle Mobile Application Server5
- Oracle Mysql5
- Oracle Property Manager5
- Oracle Service Fulfillment Manager5
- Oracle Siebel Apps - Marketing5
- Oracle Siebel CRM End User5
- Oracle Utilities Network Management System5
- Oracle Application Development Framework4
- Oracle Applications DBA4
- Oracle Applications Manager4
- Oracle Commerce Guided Search Platform Services4
- Oracle Common Applications4
- Oracle E-Business Intelligence4
- Oracle E-Business Suite Application Object Library4
- Oracle E-Business Suite Field Service4
- Oracle E-Business Suite iStore4
- Oracle E-Business Suite Marketing4
- Oracle E-Business Suite One-to-One Fulfillment4
- Oracle E-Business Suite Payments4
- Oracle E-Business Suite Spares Management4
- Oracle FLEXCUBE Core Banking4
- Oracle HCM Configuration Workbench4
- Oracle Hr-Intelligence4
- Oracle Hyperion Calculation Manager4
- Oracle iSupplier Portal4
- Oracle Java Runtime Environment (JRE)4
- Oracle JavaFX4
- Oracle Learning Management4
- Oracle Lease and Finance Management4
- Oracle MySQL Router4
- Oracle Partner Management4
- Oracle Process Manufacturing Logistics4
- Oracle Project Manufacturing4
- Oracle Sales Offline4
- Oracle Siebel CRM Development4
- Oracle Transportation Management4
- Oracle XML Gateway4
- Oracle Agile PLM MCAD Connector3
- Oracle Connector/Net3
- Oracle Converged Application Server3
- Oracle Customer Interaction History3
- Oracle Customer Relationship Management Technical Foundation3
- Oracle Demand Signal Repository3
- Oracle E-Business Suite Applications Manager3
- Oracle E-Business Suite Contracts3
- Oracle E-Business Suite CRM Technical Foundation3
- Oracle E-Business Suite Customer Interaction History3
- Oracle E-Business Suite Demand Signal Repository3
- Oracle E-Business Suite Depot Repair3
- Oracle E-Business Suite Document Management and Collaboration3
- Oracle E-Business Suite Financials Common Modules3
- Oracle E-Business Suite HRMS (India)3
- Oracle E-Business Suite Order Management3
- Oracle E-Business Suite Payroll3
- Oracle E-Business Suite Purchasing3
- Oracle E-Business Suite Workflow3
- Oracle E-Business Tax3
- Oracle Flow Manufacturing3
- Oracle HRMS France3
- Oracle Human Resources Management System3
- Oracle Identity Manager Connector for PeopleSoft Applications3
- Oracle Interaction Blending3
- Oracle iReceivables3
- Oracle iSetup3
- Oracle Java SE JDK3
- Oracle JD Edwards EnterpriseOne CRM Foundation3
- Oracle JD Edwards EnterpriseOne Human Resources Management3
- Oracle Loans3
- Oracle MySQL Shell for VS Code3
- Oracle Weblogic Server Proxy Plug-In3
- Oracle Payables3
- Oracle PeopleSoft Enterprise CS Financial Aid3
- Oracle PeopleSoft Enterprise HCM Human Resources3
- Oracle PeopleSoft Enterprise SCM Order Management3
- Oracle Process Manufacturing Systems3
- Oracle Project Contracts3
- Oracle Quality3
- Oracle Receivables3
- Oracle SDP Number Portability3
- Oracle Siebel UI Framework3
- Oracle Simphony3
- Oracle Supply Chain Trading Connector3
- Oracle TeleSales3
- Oracle Trade Management3
- Oracle Web Services Manager3
Latest Oracle vulnerabilities
- CVE-2026-83408: Oracle GraalVM Compiler remote code executionhighCVSS 8.1EPSS 0.4%
- CVE-2026-83368: Oracle GraalVM Compiler vulnerability allowing unauthorized data accesshighCVSS 7EPSS 0.3%
- CVE-2026-83357: Oracle GraalVM compiler remote code executionhighCVSS 8.1EPSS 0.4%
- CVE-2026-87289: Oracle Helidon webserver static content denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-87288: Oracle GraalVM compiler remote code executionhighCVSS 8.1EPSS 0.4%
- CVE-2026-87287: Oracle GraalVM compiler remote code executionhighCVSS 8.1EPSS 0.4%
- CVE-2026-87286: Oracle GraalVM compiler vulnerability in Java SEhighCVSS 8.1EPSS 0.4%
- CVE-2026-87285: Oracle VM VirtualBox denial of service in CoremediumCVSS 6EPSS 0.2%
- CVE-2026-87284: Oracle VM VirtualBox denial of service in CorelowCVSS 3.2EPSS 0.1%
- CVE-2026-87283: Oracle VM VirtualBox denial of service in CoremediumCVSS 6EPSS 0.2%
- CVE-2026-87282: Oracle VM VirtualBox denial of service in CoremediumCVSS 6EPSS 0.2%
- CVE-2026-87281: Oracle VM VirtualBox information disclosure in CorelowCVSS 3.2EPSS 0.2%
- CVE-2026-87280: Oracle VM VirtualBox denial of service in CoremediumCVSS 4.2EPSS 0.1%
- CVE-2026-87279: Oracle VM VirtualBox denial of service in Core componentmediumCVSS 6.1EPSS 0.1%
- CVE-2026-87278: Oracle VM VirtualBox denial of service and data modification in CoremediumCVSS 6.1EPSS 0.1%
- CVE-2026-87277: Oracle VM VirtualBox denial of service via RDPhighCVSS 7.5EPSS 0.5%
- CVE-2026-87276: Oracle VirtualBox privilege escalation in CorehighCVSS 7.5EPSS 0.1%
- CVE-2026-87275: Oracle VM VirtualBox information disclosure and denial of service in CoremediumCVSS 4.6EPSS 0.2%
- CVE-2026-87274: Oracle VM VirtualBox denial of service in CoremediumCVSS 4.4EPSS 0.1%
- CVE-2026-87273: Oracle VM VirtualBox privilege escalation in CorehighCVSS 8.6EPSS 0.2%
- CVE-2026-87271: Oracle VM VirtualBox privilege escalation in CorehighCVSS 7.8EPSS 0.2%
- CVE-2026-87270: Oracle VM VirtualBox privilege escalation in CorehighCVSS 7.8EPSS 0.2%
- CVE-2026-87269: Oracle VM VirtualBox privilege escalation in Core on WindowshighCVSS 7.8EPSS 0.2%
- CVE-2026-87268: Oracle VM VirtualBox privilege escalation in CorehighCVSS 7.8EPSS 0.2%
- CVE-2026-87267: Oracle VM VirtualBox denial of service via RDPmediumCVSS 5.3EPSS 0.3%
Most severe Oracle vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-21962: Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware…criticalexploited in the wildCVSS 10EPSS 70.9%
- CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2025-61882: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher…criticalexploited in the wildCVSS 9.8EPSS 99.7%
- CVE-2025-61757: Oracle Identity Manager missing authentication in REST WebServicescriticalexploited in the wildCVSS 9.8EPSS 87.8%
- CVE-2026-46817: Oracle E-Business Suite remote compromise in Oracle Paymentscriticalexploited in the wildCVSS 9.8EPSS 0.7%
- CVE-2026-35273: Oracle PeopleSoft PeopleTools compromise in Updates Environment Managementcriticalexploited in the wildCVSS 9.8EPSS 0.0%
- CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerabilitycriticalexploited in the wildCVSS 9.8
Vulnerabilities per week
The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 29 Jun 2026 | 0 | 0 | |
| 6 Jul 2026 | 0 | 0 | |
| 13 Jul 2026 | 0 | 0 | |
| 20 Jul 2026 | 1,044 | 200 | |
| 27 Jul 2026 | 0 | 0 | |
| 3 Aug 2026 | 0 | 0 | |
| 10 Aug 2026 | 0 | 0 | |
| 17 Aug 2026 | 294 | 31 | |
| 24 Aug 2026 | 1 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 592 | 83 | |
| 21 Sep 2026 | 0 | 0 |
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/oracle.json, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Oracle vulnerabilities", https://junglewise.ai/threats/vendors/oracle, 26 September 2026.