Security Digest
Oracle: known exploited vulnerabilities
14 Oracle CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-08-24 | CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 2026-08-27 |
| 2026-07-15 | CVE-2026-46817 | Oracle E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability | 2026-07-18 |
| 2026-06-12 | CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Ransomware | 2026-06-15 |
| 2026-06-01 | CVE-2024-21182 | Oracle WebLogic Server Oracle WebLogic Server Unspecified Vulnerability | 2026-06-04 |
| 2025-11-21 | CVE-2025-61757 | Oracle Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 2025-12-12 |
| 2025-10-20 | CVE-2025-61884 | Oracle E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 2025-11-10 |
| 2025-10-06 | CVE-2025-61882 | Oracle E-Business Suite Oracle E-Business Suite Unspecified Vulnerability Ransomware | 2025-10-27 |
| 2025-02-24 | CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 2025-03-17 |
| 2025-01-07 | CVE-2020-2883 | Oracle WebLogic Server Oracle WebLogic Server Unspecified Vulnerability | 2025-01-28 |
| 2024-11-21 | CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 2024-12-12 |
| 2024-09-18 | CVE-2022-21445 | Oracle ADF Faces Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 2024-10-09 |
| 2024-09-18 | CVE-2020-14644 | Oracle WebLogic Server Oracle WebLogic Server Remote Code Execution Vulnerability | 2024-10-09 |
| 2024-06-03 | CVE-2017-3506 | Oracle WebLogic Server Oracle WebLogic Server OS Command Injection Vulnerability | 2024-06-24 |
| 2023-11-16 | CVE-2020-2551 | Oracle Fusion Middleware Oracle Fusion Middleware Unspecified Vulnerability | 2023-12-07 |