CISA KEV by vendor
Oracle vulnerabilities in the CISA KEV catalogue
46 Oracle entries in CISA's Known Exploited Vulnerabilities catalogue, 13 of them (28 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 24 August 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
46entries, 2.6% of the catalogue
13known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| WebLogic Server | 12 |
| Java SE | 7 |
| Fusion Middleware | 6 |
| E-Business Suite | 4 |
| Java Runtime Environment (JRE) | 4 |
| Agile Product Lifecycle Management (PLM) | 2 |
| HTTP Server and Oracle Weblogic Server Proxy Plug-in | 1 |
| PeopleSoft Enterprise PeopleTools | 1 |
| ADF Faces | 1 |
| Java SE and JRockit | 1 |
| Solaris | 1 |
| BI Publisher (Formerly XML Publisher) | 1 |
| Java SE JDK and JRE | 1 |
| VirtualBox | 1 |
| Intelligence Enterprise Edition | 1 |
| Multiple Products | 1 |
| Solaris and Zettabyte File System (ZFS) | 1 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 2026-08-27 | Unknown | 10.0 Critical | 73.1% | Auto, total | 3 days + triage |
| CVE-2026-46817 | E-Business Suite | 2026-07-15 | 2026-07-18 | Unknown | 9.8 Critical | 12.3% | Auto, total | 3 days + triage |
| CVE-2026-35273 | PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | Known | 9.8 Critical | 96.6% | Auto, total | 3 days + triage |
| CVE-2024-21182 | WebLogic Server | 2026-06-01 | 2026-06-04 | Unknown | 7.5 High | 74.1% | Auto, partial | 3 days |
| CVE-2025-61757 | Fusion Middleware | 2025-11-21 | 2025-12-12 | Unknown | 9.8 Critical | 88.6% | Auto, total | 3 days + triage |
| CVE-2025-61884 | E-Business Suite | 2025-10-20 | 2025-11-10 | Known | 7.5 High | 95.8% | Auto, partial | 3 days |
| CVE-2025-61882 | E-Business Suite | 2025-10-06 | 2025-10-27 | Known | 9.8 Critical | 99.7% | Auto, total | 3 days + triage |
| CVE-2024-20953 | Agile Product Lifecycle Management (PLM) | 2025-02-24 | 2025-03-17 | Unknown | 8.8 High | 3.9% | Not auto, total | 3 days + triage |
| CVE-2020-2883 | WebLogic Server | 2025-01-07 | 2025-01-28 | Unknown | 9.8 Critical | 94.5% | Auto, total | 3 days + triage |
| CVE-2024-21287 | Agile Product Lifecycle Management (PLM) | 2024-11-21 | 2024-12-12 | Unknown | 7.5 High | 1.7% | Auto, partial | 3 days |
All 46 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 2026-08-27 | Unknown | 10.0 Critical | 73.1% | Auto, total | 3 days + triage |
| CVE-2026-46817 | E-Business Suite | 2026-07-15 | 2026-07-18 | Unknown | 9.8 Critical | 12.3% | Auto, total | 3 days + triage |
| CVE-2026-35273 | PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | Known | 9.8 Critical | 96.6% | Auto, total | 3 days + triage |
| CVE-2024-21182 | WebLogic Server | 2026-06-01 | 2026-06-04 | Unknown | 7.5 High | 74.1% | Auto, partial | 3 days |
| CVE-2025-61757 | Fusion Middleware | 2025-11-21 | 2025-12-12 | Unknown | 9.8 Critical | 88.6% | Auto, total | 3 days + triage |
| CVE-2025-61884 | E-Business Suite | 2025-10-20 | 2025-11-10 | Known | 7.5 High | 95.8% | Auto, partial | 3 days |
| CVE-2025-61882 | E-Business Suite | 2025-10-06 | 2025-10-27 | Known | 9.8 Critical | 99.7% | Auto, total | 3 days + triage |
| CVE-2024-20953 | Agile Product Lifecycle Management (PLM) | 2025-02-24 | 2025-03-17 | Unknown | 8.8 High | 3.9% | Not auto, total | 3 days + triage |
| CVE-2020-2883 | WebLogic Server | 2025-01-07 | 2025-01-28 | Unknown | 9.8 Critical | 94.5% | Auto, total | 3 days + triage |
| CVE-2024-21287 | Agile Product Lifecycle Management (PLM) | 2024-11-21 | 2024-12-12 | Unknown | 7.5 High | 1.7% | Auto, partial | 3 days |
| CVE-2022-21445 | ADF Faces | 2024-09-18 | 2024-10-09 | Unknown | 9.8 Critical | 62.4% | Auto, total | 3 days + triage |
| CVE-2020-14644 | WebLogic Server | 2024-09-18 | 2024-10-09 | Unknown | 9.8 Critical | 94.5% | Auto, total | 3 days + triage |
| CVE-2017-3506 | WebLogic Server | 2024-06-03 | 2024-06-24 | Unknown | 7.4 High | 95.9% | Not auto, total | 3 days + triage |
| CVE-2020-2551 | Fusion Middleware | 2023-11-16 | 2023-12-07 | Unknown | 9.8 Critical | 92.8% | Auto, total | 3 days + triage |
| CVE-2016-3427 | Java SE and JRockit | 2023-05-12 | 2023-06-02 | Unknown | 9.8 Critical | 92.3% | Auto, total | 3 days + triage |
| CVE-2023-21839 | WebLogic Server | 2023-05-01 | 2023-05-22 | Unknown | 7.5 High | 99.9% | Auto, partial | 3 days |
| CVE-2022-21587 | E-Business Suite | 2023-02-02 | 2023-02-23 | Known | 9.8 Critical | 98.3% | Auto, total | 3 days + triage |
| CVE-2021-35587 | Fusion Middleware | 2022-11-28 | 2022-12-19 | Unknown | 9.8 Critical | 96.2% | Auto, total | 3 days + triage |
| CVE-2018-2628 | WebLogic Server | 2022-09-08 | 2022-09-29 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2019-3010 | Solaris | 2022-05-25 | 2022-06-15 | Unknown | 8.8 High | 13.5% | Not auto, total | 3 days + triage |
| CVE-2013-2423 | Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | Unknown | 3.7 Low | 85.2% | Not auto, partial | 14 days |
| CVE-2013-0431 | Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | Known | 3.7 Low | 90.1% | Not auto, partial | 14 days |
| CVE-2013-0422 | Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | Known | 9.8 Critical | 97.0% | Auto, total | 3 days + triage |
| CVE-2012-1710 | Fusion Middleware | 2022-05-25 | 2022-06-15 | Known | 9.8 Critical | 7.8% | Not auto, total | 3 days + triage |
| CVE-2010-0840 | Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | Unknown | 9.8 Critical | 96.3% | Auto, total | 3 days + triage |
| CVE-2013-2465 | Java SE | 2022-03-28 | 2022-04-18 | Known | 9.8 Critical | 98.7% | Auto, total | 3 days + triage |
| CVE-2012-5076 | Java SE | 2022-03-28 | 2022-04-18 | Unknown | 9.8 Critical | 91.2% | Auto, total | 3 days + triage |
| CVE-2012-0518 | Fusion Middleware | 2022-03-28 | 2022-04-18 | Unknown | 4.7 Medium | 4.6% | Not auto, partial | 14 days |
| CVE-2019-2616 | BI Publisher (Formerly XML Publisher) | 2022-03-25 | 2022-04-15 | Unknown | 7.2 High | 92.1% | Auto, partial | 3 days |
| CVE-2015-4902 | Java SE | 2022-03-03 | 2022-03-24 | Unknown | 5.3 Medium | 13.6% | Auto, partial | 3 days |
| CVE-2015-2590 | Java SE | 2022-03-03 | 2022-03-24 | Unknown | 9.8 Critical | 25.4% | Auto, total | 3 days + triage |
| CVE-2012-4681 | Java SE | 2022-03-03 | 2022-03-24 | Known | 9.8 Critical | 98.5% | Auto, total | 3 days + triage |
| CVE-2012-1723 | Java SE | 2022-03-03 | 2022-03-24 | Known | 9.8 Critical | 93.5% | Auto, total | 3 days + triage |
| CVE-2012-0507 | Java SE | 2022-03-03 | 2022-03-24 | Known | 9.8 Critical | 98.1% | Auto, total | 3 days + triage |
| CVE-2011-3544 | Java SE JDK and JRE | 2022-03-03 | 2022-03-24 | Unknown | 9.8 Critical | 96.6% | Auto, total | 3 days + triage |
| CVE-2008-3431 | VirtualBox | 2022-03-03 | 2022-03-24 | Unknown | 8.8 High | 6.8% | Not auto, total | 3 days + triage |
| CVE-2017-10271 | WebLogic Server | 2022-02-10 | 2022-08-10 | Known | 7.5 High | 99.9% | Auto, partial | 3 days |
| CVE-2020-14864 | Intelligence Enterprise Edition | 2022-01-18 | 2022-07-18 | Unknown | 7.5 High | 97.2% | Auto, partial | 3 days |
| CVE-2019-2725 | WebLogic Server | 2022-01-10 | 2022-07-10 | Known | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2020-2555 | Multiple Products | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 97.1% | Auto, total | 3 days + triage |
| CVE-2020-14883 | WebLogic Server | 2021-11-03 | 2022-05-03 | Unknown | 7.2 High | 97.7% | Not auto, total | 3 days + triage |
| CVE-2020-14882 | WebLogic Server | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2020-14871 | Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 2022-05-03 | Unknown | 10.0 Critical | 80.1% | Not auto, total | 3 days + triage |
| CVE-2020-14750 | WebLogic Server | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 99.2% | Auto, total | 3 days + triage |
| CVE-2015-4852 | WebLogic Server | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 94.9% | Auto, total | 3 days + triage |
| CVE-2012-3152 | Fusion Middleware | 2021-11-03 | 2022-05-03 | Unknown | 9.1 Critical | 98.7% | Auto, total | 3 days + triage |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Oracle in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.