Vendor
Oracle vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 4,163 vulnerabilities in Oracle: 1 in the last 7 days and 2,431 in the last 90 days, 680 of them critical and 47 exploited in the wild. The most recent, CVE-2026-111241, was published on 10 November 2026. 987 vulnerabilities in the last four weeks, up 66% on the four before (593). 66 critical against 83. 258 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 2,431
- Critical, all time
- 680
- Exploited in the wild
- 47
About Oracle
Oracle Corporation is a multinational technology company that develops database software, cloud computing solutions, and enterprise software.
Oracle technologies
- Oracle MySQL Server163
- Oracle Hyperion Financial Management142
- Oracle Helidon130
- Oracle MySQL Cluster129
- Oracle Coherence113
- Oracle E-Business Suite110
- Oracle WebCenter Content110
- Oracle Commerce Guided Search104
- Oracle Commerce Experience Manager102
- Oracle JD Edwards EnterpriseOne Tools101
- Oracle PeopleSoft Enterprise PeopleTools101
- Oracle Java SE92
- Oracle VirtualBox86
- Oracle Siebel CRM79
- Oracle WebLogic Server72
- Oracle Hyperion Infrastructure Technology68
- Oracle WebCenter Portal65
- Oracle GraalVM for JDK58
- Oracle Hyperion Data Relationship Management56
- Oracle GraalVM Enterprise Edition55
- Oracle Business Intelligence Enterprise Edition52
- Oracle WebCenter Sites50
- Oracle Siebel CRM Deployment49
- Oracle Enterprise Manager Base Platform48
- Oracle Advanced Outbound Telephony45
- Oracle Solaris44
- Oracle Access Manager43
- Oracle Siebel CRM Cloud Applications43
- Oracle WebCenter Enterprise Capture43
- Oracle Reports Developer41
- Oracle Outside In Technology39
- Oracle BI Publisher38
- Oracle Essbase38
- Oracle Identity Manager Connector38
- Oracle Agile PLM37
- Oracle Rest-Data-Services37
- Oracle Hyperion Calculation Manager36
- Oracle SOA Suite36
- Oracle Unified Directory32
- Oracle Agile Product Lifecycle Management for Process31
- Oracle Hyperion Financial Reporting29
- Oracle Agile Engineering Data Management27
- Oracle Service Delivery Platform27
- Oracle JDeveloper24
- Oracle Marketing24
- Oracle WebCenter Content: Imaging24
- Oracle Agile PLM MCAD Connector22
- Oracle One-to-One Fulfillment21
- Oracle Product Hub19
- Oracle Identity Manager18
- Oracle Application Testing Suite17
- Oracle GoldenGate17
- Oracle Mobile Field Service16
- Oracle Platform Security for Java16
- Oracle Siebel CRM End User16
- Oracle Agile Product Lifecycle Management15
- Oracle Enterprise Command Center Framework15
- Oracle Database Server15
- Oracle Siebel Apps - Marketing15
- Oracle Commerce Platform14
- Oracle E-Business Suite Payroll14
- Oracle Fusion Middleware14
- Oracle Internet Directory14
- Oracle Java SE Embedded14
- Oracle JRockit14
- Oracle Product Lifecycle Analytics14
- Oracle Communications Billing and Revenue Management13
- Oracle Data Integrator13
- Oracle FLEXCUBE Universal Banking13
- Oracle Payroll13
- Oracle PeopleSoft PeopleTools13
- Oracle Siebel CRM Integration13
- Oracle TimesTen In-Memory Database13
- Oracle E-Business Suite HRMS (US)12
- Oracle E-Business Suite Product Hub12
- Oracle Graalvm12
- Oracle iSupport12
- Oracle Jdk12
- Oracle JRE12
- Oracle PeopleSoft Enterprise CS Campus Community12
- Oracle Purchasing12
- Oracle Zfs Storage Appliance Kit12
- Oracle Order Management11
- Oracle Payments11
- Oracle Work in Process11
- Oracle Workflow11
- Oracle Application Object Library10
- Oracle Applications Framework10
- Oracle Autonomous Health Framework10
- Oracle HRMS (UK)10
- Oracle Business Intelligence10
- Oracle PeopleSoft Enterprise FIN Common Objects Argentina10
- Oracle PeopleSoft Enterprise FIN Common Objects Brazil10
- Oracle Siebel CRM Development10
- Oracle Time and Labor10
- Oracle Contracts Integration9
- Oracle E-Business Suite Application Object Library9
- Oracle General Ledger9
- Oracle MySQL Router9
- Oracle Production Scheduling9
- Oracle Public Sector Financials9
- Oracle Universal-Work-Queue9
- Oracle Applications Manager8
- Oracle Bills of Material8
- Oracle E-Business Suite Bills of Material8
- Oracle E-Business Suite Integrated SOA Gateway8
- Oracle E-Business Suite One-to-One Fulfillment8
- Oracle Enterprise Asset Management8
- Oracle FLEXCUBE Private Banking8
- Oracle Knowledge Management8
- Oracle Mysql8
- Oracle PeopleSoft Enterprise PT PeopleTools8
- Oracle Trusted Answer Search8
- Oracle Utilities Network Management System8
- Oracle Advanced-Benefits7
- Oracle Applications DBA7
- Oracle Business Process Management Suite7
- Oracle E-Business Suite Order Management7
- Oracle E-Business Suite Purchasing7
- Oracle EDI Gateway7
- Oracle FLEXCUBE Investor Servicing7
- Oracle HRMS (US)7
- Oracle Hyperion Profitability7
- Oracle Hyperion Profitability and Cost Management7
- Oracle Installed Base7
- Oracle iRecruitment7
- Oracle iStore7
- Oracle JD Edwards EnterpriseOne Orchestrator7
- Oracle Mobile Application Server7
- Oracle PeopleSoft Enterprise Campus Solutions Student Records7
- Oracle Price Protection7
- Oracle Project Portfolio Analysis7
- Oracle Scripting7
- Oracle E-Business Suite Applications DBA6
- Oracle E-Business Suite Capacity6
- Oracle E-Business Suite Marketing6
- Oracle E-Business Suite Partner Management6
- Oracle Financial Services Analytical Applications Infrastructure6
- Oracle iSupplier Portal6
- Oracle JavaFX6
- Oracle Labor Distribution6
- Oracle PeopleSoft Enterprise HCM Human Resources6
- Oracle Product Workbench6
- Oracle Secure Backup6
- Oracle Service Fulfillment Manager6
- Oracle Application Development Framework5
- Oracle Communications BRM - Elastic Charging Engine5
- Oracle Complex Maintenance, Repair and Overhaul5
- Oracle Connector/J5
- Oracle E-Business Suite Applications Manager5
- Oracle E-Business Suite Contract Lifecycle Management for Public Sector5
- Oracle E-Business Suite HRMS (India)5
- Oracle Email Center5
- Oracle Flow Manufacturing5
- Oracle GlassFish Server5
- Oracle Human Resources5
- Oracle iSetup5
- Oracle JD Edwards EnterpriseOne Human Resources Management5
- Oracle Learning Management5
- Oracle Http Server5
- Oracle Partner Management5
- Oracle Property Manager5
- Oracle Service Bus5
- Oracle Shipping Execution5
- Oracle Warehouse Management5
- Oracle Web Services Manager5
- Oracle WebLogic Server Proxy Plug-in5
- Oracle Commerce Guided Search Platform Services4
- Oracle Common Applications4
- Oracle Communications Unified Inventory Management4
- Oracle Demand Planning4
- Oracle E-Business Intelligence4
- Oracle E-Business Suite Document Management and Collaboration4
- Oracle E-Business Suite EDI Gateway4
- Oracle E-Business Suite Field Service4
- Oracle E-Business Suite Installed Base4
- Oracle E-Business Suite iProcurement4
- Oracle E-Business Suite iStore4
- Oracle E-Business Suite iSupport4
- Oracle E-Business Suite Payments4
- Oracle E-Business Suite Report Manager4
- Oracle E-Business Suite Spares Management4
- Oracle E-Business Suite Workflow4
- Oracle E-Business Tax4
- Oracle FLEXCUBE Core Banking4
- Oracle HCM Common Architecture4
- Oracle HCM Configuration Workbench4
- Oracle Hr-Intelligence4
- Oracle Java Runtime Environment (JRE)4
- Oracle Lease and Finance Management4
- Oracle Life Sciences Inform4
- Oracle Primavera P6 Enterprise Project Portfolio Management4
- Oracle Primavera Unifier4
- Oracle Process Manufacturing Logistics4
- Oracle Project Manufacturing4
- Oracle Public Sector Human Resources4
- Oracle Sales Offline4
- Oracle Transportation Management4
- Oracle XML Gateway4
- Oracle Complex Maintenance Repair3
- Oracle Connector/Net3
- Oracle Converged Application Server3
- Oracle Customer Interaction History3
- Oracle Customer Relationship Management Technical Foundation3
- Oracle Customers Online3
- Oracle Demand Signal Repository3
- Oracle E-Business Suite Complex Maintenance, Repair and Overhaul3
- Oracle E-Business Suite Concurrent Processing3
- Oracle E-Business Suite Contracts3
- Oracle E-Business Suite CRM Technical Foundation3
- Oracle E-Business Suite Customer Interaction History3
- Oracle E-Business Suite Demand Signal Repository3
- Oracle E-Business Suite Depot Repair3
- Oracle E-Business Suite Engineering3
- Oracle E-Business Suite Financials Common Modules3
- Oracle E-Business Suite HRMS (UK)3
- Oracle E-Business Suite Pasta3
- Oracle E-Business Suite Quality3
- Oracle E-Business Suite US Federal Human Resources3
- Oracle Enterprise Manager for Oracle Database3
- Oracle Fusion Middleware Control3
- Oracle Hospitality Simphony3
- Oracle HRMS France3
- Oracle Human Resources Management System3
- Oracle Identity Manager Connector for PeopleSoft Applications3
- Oracle Interaction Blending3
- Oracle iReceivables3
- Oracle Java SE JDK3
- Oracle JD Edwards EnterpriseOne CRM Foundation3
- Oracle JD Edwards EnterpriseOne General Ledger3
- Oracle Loans3
- Oracle Mysql Connector\3
- Oracle Mysql Connector\/J3
- Oracle MySQL Shell for VS Code3
- Oracle Linux3
- Oracle Odbc3
- Oracle Overhaul3
- Oracle Payables3
- Oracle PeopleSoft Enterprise CC Common Application Objects3
- Oracle PeopleSoft Enterprise CS Financial Aid3
- Oracle Peoplesoft Enterprise Fin Maintenance Management3
- Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland3
- Oracle PeopleSoft Enterprise SCM Order Management3
- Oracle PeopleSoft Enterprise SCM Purchasing3
- Oracle PeopleSoft Enterprise SCM Strategic Sourcing3
- Oracle Process Manufacturing Systems3
- Oracle Project Contracts3
- Oracle Quality3
- Oracle Receivables3
- Oracle Sales3
- Oracle SDP Number Portability3
- Oracle Siebel CRM Apps Marketing3
- Oracle Siebel UI Framework3
- Oracle Simphony3
- Oracle Supply Chain Trading Connector3
- Oracle TeleSales3
- Oracle Trade Management3
- Oracle Transportation Execution3
Latest Oracle vulnerabilities
- CVE-2026-111241: GlassFish stateful session bean insecure passivation storageinfo
- CVE-2026-114820: Oracle Java SE JSSE protocol handling vulnerabilitycriticalCVSS 9.1
- CVE-2026-91403: Oracle Java SE JSSE remote data exposure and modificationcriticalCVSS 9.1
- CVE-2026-91668: Oracle Data Integrator privilege escalation in Dictionary RepositoryhighCVSS 8.8
- CVE-2026-91665: Oracle Essbase unauthenticated remote code executioncriticalCVSS 9.8
- CVE-2026-91664: Oracle Essbase denial of service in Security componenthighCVSS 7.5
- CVE-2026-91663: Oracle Essbase privilege escalation in Security componentcriticalCVSS 9.9
- CVE-2026-91662: Oracle Essbase privilege escalation in Java Based AgentmediumCVSS 6.4
- CVE-2026-91661: Oracle Essbase authentication bypass in security componenthighCVSS 7.7
- CVE-2026-91660: Oracle Essbase denial of service in Security componentmediumCVSS 4.3
- CVE-2026-91659: Oracle Essbase privilege escalation via HTTP in Build componenthighCVSS 7.7
- CVE-2026-91658: Oracle Essbase privilege escalation via HTTPcriticalCVSS 9.9
- CVE-2026-91657: Oracle Essbase unauthorized data access in Security componentmediumCVSS 4.3
- CVE-2026-91656: Oracle Essbase privilege escalation in Federated PartitionscriticalCVSS 9.1
- CVE-2026-91655: Oracle Essbase privilege escalation via HTTPcriticalCVSS 9.1
- CVE-2026-91654: Oracle Essbase privilege escalation in Security componentmediumCVSS 6.3
- CVE-2026-91653: Oracle Essbase privilege escalation in Web PlatformhighCVSS 8.5
- CVE-2026-91652: Oracle Essbase information disclosure in Security componentmediumCVSS 5
- CVE-2026-91651: Oracle Essbase privilege escalation in Web PlatformhighCVSS 8.5
- CVE-2026-91649: Oracle Essbase privilege escalation in Java Based AgentmediumCVSS 6
- CVE-2026-91648: Oracle Essbase unauthenticated information disclosure in Java Based AgentmediumCVSS 5.3
- CVE-2026-91647: Oracle Essbase security vulnerability in authentication componenthighCVSS 8.1
- CVE-2026-91646: Oracle Essbase authentication bypass in T3 and IIOPmediumCVSS 5.6
- CVE-2026-91645: Oracle Essbase unauthorized information disclosure via HTTPmediumCVSS 5.3
- CVE-2026-91644: Oracle Essbase unauthenticated network access vulnerabilitycriticalCVSS 9.3
Most severe Oracle vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-21962: Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in improper access controlcriticalexploited in the wildCVSS 10EPSS 70.9%
- CVE-2020-14871: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerabilitycriticalexploited in the wildCVSS 10
- CVE-2025-61882: Oracle E-Business Suite improper authentication in BI Publisher Integrationcriticalexploited in the wildCVSS 9.8EPSS 99.7%
- CVE-2025-61757: Oracle Identity Manager missing authentication in REST WebServicescriticalexploited in the wildCVSS 9.8EPSS 88.6%
- CVE-2026-46817: Oracle E-Business Suite remote compromise in Oracle Paymentscriticalexploited in the wildCVSS 9.8EPSS 0.7%
- CVE-2026-35273: Oracle PeopleSoft PeopleTools compromise in Updates Environment Managementcriticalexploited in the wildCVSS 9.8EPSS 0.0%
- CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerabilitycriticalexploited in the wildCVSS 9.8
Vulnerabilities per week
987 vulnerabilities in the last four weeks, up 66% on the four before (593). 66 critical against 83. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 849 | 142 | |
| 24 Aug 2026 | 1 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 592 | 83 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 1 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 987 | 66 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 1 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Oracle vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/oracle)<a href="https://junglewise.ai/threats/vendors/oracle"><img src="https://junglewise.ai/threats/vendors/oracle/badge.svg" alt="Oracle vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/oracle.json, and this page as text at https://junglewise.ai/threats/vendors/oracle.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Oracle vulnerabilities", https://junglewise.ai/threats/vendors/oracle, 11 November 2026.