---
title: "Oracle: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/oracle/
description: "Every Oracle vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (14), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-08-24
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Oracle: known exploited vulnerabilities

- 2026-08-24 [CVE-2026-21962](https://erroneo.us/security/cve/CVE-2026-21962/index.md) Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (due 2026-08-27; ransomware: Unknown)
- 2026-07-15 [CVE-2026-46817](https://erroneo.us/security/cve/CVE-2026-46817/index.md) Oracle E-Business Suite: Oracle E-Business Suite Improper Privilege Management Vulnerability (due 2026-07-18; ransomware: Unknown)
- 2026-06-12 [CVE-2026-35273](https://erroneo.us/security/cve/CVE-2026-35273/index.md) Oracle  PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability (due 2026-06-15; ransomware: Known)
- 2026-06-01 [CVE-2024-21182](https://erroneo.us/security/cve/CVE-2024-21182/index.md) Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability (due 2026-06-04; ransomware: Unknown)
- 2025-11-21 [CVE-2025-61757](https://erroneo.us/security/cve/CVE-2025-61757/index.md) Oracle Fusion Middleware: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability (due 2025-12-12; ransomware: Unknown)
- 2025-10-20 [CVE-2025-61884](https://erroneo.us/security/cve/CVE-2025-61884/index.md) Oracle E-Business Suite: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability (due 2025-11-10; ransomware: Known)
- 2025-10-06 [CVE-2025-61882](https://erroneo.us/security/cve/CVE-2025-61882/index.md) Oracle E-Business Suite: Oracle E-Business Suite Unspecified Vulnerability (due 2025-10-27; ransomware: Known)
- 2025-02-24 [CVE-2024-20953](https://erroneo.us/security/cve/CVE-2024-20953/index.md) Oracle Agile Product Lifecycle Management (PLM): Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability (due 2025-03-17; ransomware: Unknown)
- 2025-01-07 [CVE-2020-2883](https://erroneo.us/security/cve/CVE-2020-2883/index.md) Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability (due 2025-01-28; ransomware: Unknown)
- 2024-11-21 [CVE-2024-21287](https://erroneo.us/security/cve/CVE-2024-21287/index.md) Oracle Agile Product Lifecycle Management (PLM): Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability (due 2024-12-12; ransomware: Unknown)
- 2024-09-18 [CVE-2022-21445](https://erroneo.us/security/cve/CVE-2022-21445/index.md) Oracle ADF Faces: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability (due 2024-10-09; ransomware: Unknown)
- 2024-09-18 [CVE-2020-14644](https://erroneo.us/security/cve/CVE-2020-14644/index.md) Oracle WebLogic Server: Oracle WebLogic Server Remote Code Execution Vulnerability (due 2024-10-09; ransomware: Unknown)
- 2024-06-03 [CVE-2017-3506](https://erroneo.us/security/cve/CVE-2017-3506/index.md) Oracle WebLogic Server: Oracle WebLogic Server OS Command Injection Vulnerability (due 2024-06-24; ransomware: Unknown)
- 2023-11-16 [CVE-2020-2551](https://erroneo.us/security/cve/CVE-2020-2551/index.md) Oracle Fusion Middleware: Oracle Fusion Middleware Unspecified Vulnerability (due 2023-12-07; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/oracle/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt