Oracle known exploited vulnerabilities
The Beam CVE database tracks 101 known exploited vulnerabilities for Oracle: 30 critical, 15 high, 40 medium and 16 low severity. 46 are known to be exploited (CISA KEV). The newest is CVE-2026-101516, published Oct 20, 2026.
These are the Oracle vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 101
- Critical
- 30
- Known exploited (CISA KEV)
- 46
- Published in the last 30 days
- 55
All entries, newest first
CVE-2026-101516
Oracle Java SE Libraries vulnerability (CVE-2026-101516)
medium6.5Oct 20, 2026CVE-2026-101737
Oracle Java SE Compiler vulnerability (CVE-2026-101737)
medium5.9Oct 20, 2026CVE-2026-43660
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-43660)
high7.5Oct 20, 2026CVE-2026-46470
Oracle Java SE JavaFX (gstreamer) vulnerability (CVE-2026-46470)
medium4.2Oct 20, 2026CVE-2026-6732
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-6732)
medium5.9Oct 20, 2026CVE-2026-83374
Oracle Java SE Security vulnerability (CVE-2026-83374)
medium5.9Oct 20, 2026CVE-2026-83376
Oracle Java SE JSSE vulnerability (CVE-2026-83376)
low3.7Oct 20, 2026CVE-2026-83378
Oracle Java SE Compiler vulnerability (CVE-2026-83378)
medium4.8Oct 20, 2026CVE-2026-83380
Oracle Java SE JAAS vulnerability (CVE-2026-83380)
medium5.3Oct 20, 2026CVE-2026-83381
Oracle Java SE Security vulnerability (CVE-2026-83381)
medium4.8Oct 20, 2026CVE-2026-83387
Oracle Java SE JDBC vulnerability (CVE-2026-83387)
medium5.9Oct 20, 2026CVE-2026-83395
Oracle Java SE Networking vulnerability (CVE-2026-83395)
medium6.5Oct 20, 2026CVE-2026-83400
Oracle Java SE JAXP vulnerability (CVE-2026-83400)
medium5.3Oct 20, 2026CVE-2026-87255
Oracle Java SE Compiler vulnerability (CVE-2026-87255)
low3.7Oct 20, 2026CVE-2026-87290
Oracle Java SE JAXP vulnerability (CVE-2026-87290)
medium5.9Oct 20, 2026CVE-2026-87291
Oracle Java SE Networking vulnerability (CVE-2026-87291)
medium5.3Oct 20, 2026CVE-2026-87292
Oracle Java SE Networking vulnerability (CVE-2026-87292)
low3.7Oct 20, 2026CVE-2026-87293
Oracle Java SE RMI vulnerability (CVE-2026-87293)
medium5.4Oct 20, 2026CVE-2026-87294
Oracle Java SE Security vulnerability (CVE-2026-87294)
medium6.5Oct 20, 2026CVE-2026-87367
Oracle Java SE JAXP vulnerability (CVE-2026-87367)
low3.7Oct 20, 2026CVE-2026-91332
Oracle Java SE Networking vulnerability (CVE-2026-91332)
medium5.3Oct 20, 2026CVE-2026-91333
Oracle Java SE Security vulnerability (CVE-2026-91333)
low3.7Oct 20, 2026CVE-2026-91334
Oracle Java SE ImageIO vulnerability (CVE-2026-91334)
low3.7Oct 20, 2026CVE-2026-91335
Oracle Java SE AWT vulnerability (CVE-2026-91335)
low2.6Oct 20, 2026CVE-2026-91373
Oracle Java SE JSSE vulnerability (CVE-2026-91373)
medium5.3Oct 20, 2026CVE-2026-91374
Oracle Java SE Serviceability vulnerability (CVE-2026-91374)
medium4.8Oct 20, 2026CVE-2026-91375
Oracle Java SE Libraries vulnerability (CVE-2026-91375)
medium4.7Oct 20, 2026CVE-2026-91379
Oracle Java SE JDK tools vulnerability (CVE-2026-91379)
medium4.7Oct 20, 2026CVE-2026-91380
Oracle Java SE Utility vulnerability (CVE-2026-91380)
medium4.0Oct 20, 2026CVE-2026-91381
Oracle Java SE 2D vulnerability (CVE-2026-91381)
low3.7Oct 20, 2026CVE-2026-91382
Oracle Java SE 2D vulnerability (CVE-2026-91382)
medium6.5Oct 20, 2026CVE-2026-91385
Oracle Java SE JavaFX vulnerability (CVE-2026-91385)
medium5.4Oct 20, 2026CVE-2026-91394
Oracle Java SE Networking vulnerability (CVE-2026-91394)
medium5.9Oct 20, 2026CVE-2026-91395
Oracle Java SE Utility vulnerability (CVE-2026-91395)
medium6.5Oct 20, 2026CVE-2026-91396
Oracle Java SE Utility vulnerability (CVE-2026-91396)
medium6.5Oct 20, 2026CVE-2026-91397
Oracle Java SE Serviceability vulnerability (CVE-2026-91397)
low3.6Oct 20, 2026CVE-2026-91398
Oracle Java SE Networking vulnerability (CVE-2026-91398)
medium6.8Oct 20, 2026CVE-2026-91400
Oracle Java SE Sound vulnerability (CVE-2026-91400)
low3.1Oct 20, 2026CVE-2026-91402
Oracle Java SE JavaFX vulnerability (CVE-2026-91402)
low3.1Oct 20, 2026CVE-2026-91409
Oracle Java SE Networking vulnerability (CVE-2026-91409)
low3.7Oct 20, 2026CVE-2026-91410
Oracle Java SE Libraries vulnerability (CVE-2026-91410)
medium5.3Oct 20, 2026CVE-2026-91411
Oracle Java SE JGSS vulnerability (CVE-2026-91411)
medium6.5Oct 20, 2026CVE-2026-91415
Oracle Java SE 2D vulnerability (CVE-2026-91415)
high7.0Oct 20, 2026CVE-2026-91417
Oracle Java SE CORBA vulnerability (CVE-2026-91417)
medium5.3Oct 20, 2026CVE-2026-91418
Oracle Java SE ImageIO vulnerability (CVE-2026-91418)
medium5.3Oct 20, 2026CVE-2026-91451
Oracle Java SE Networking vulnerability (CVE-2026-91451)
medium5.3Oct 20, 2026CVE-2026-91452
Oracle Java SE Networking vulnerability (CVE-2026-91452)
medium5.3Oct 20, 2026CVE-2026-91453
Oracle Java SE Lightweight HTTP Server vulnerability (CVE-2026-91453)
medium5.3Oct 20, 2026CVE-2026-91461
Oracle Java SE JSSE vulnerability (CVE-2026-91461)
low3.7Oct 20, 2026CVE-2026-91462
Oracle Java SE JGSS vulnerability (CVE-2026-91462)
medium5.9Oct 20, 2026CVE-2026-91463
Oracle Java SE JGSS vulnerability (CVE-2026-91463)
medium5.3Oct 20, 2026CVE-2026-91464
Oracle Java SE JGSS vulnerability (CVE-2026-91464)
medium5.3Oct 20, 2026CVE-2026-91477
Oracle JavaFX JavaFX vulnerability (CVE-2026-91477)
low3.1Oct 20, 2026CVE-2026-91484
Oracle Java SE Java plugin vulnerability (CVE-2026-91484)
high7.5Oct 20, 2026CVE-2026-91487
Oracle Java SE Compiler vulnerability (CVE-2026-91487)
medium4.8Oct 20, 2026CVE-2026-35273
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
critical9.8ExploitedJun 11, 2026CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
critical9.8ExploitedMay 28, 2026CVE-2026-21962
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
critical10.0ExploitedJan 20, 2026CVE-2025-61757
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
critical9.8ExploitedOct 21, 2025CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
high7.5ExploitedOct 12, 2025CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
critical9.8ExploitedOct 5, 2025CVE-2024-21287
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
high7.5ExploitedNov 18, 2024CVE-2024-21182
Oracle WebLogic Server Unspecified Vulnerability
high7.5ExploitedJul 16, 2024CVE-2024-20953
Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
high8.8ExploitedFeb 17, 2024CVE-2023-21839
Oracle WebLogic Server Unspecified Vulnerability
high7.5ExploitedJan 18, 2023CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
critical9.8ExploitedOct 18, 2022CVE-2022-21445
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedApr 19, 2022CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedJan 19, 2022CVE-2020-14750
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedNov 2, 2020CVE-2020-14864
Oracle Business Intelligence Enterprise Edition Path Transversal
high7.5ExploitedOct 21, 2020CVE-2020-14871
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
critical10.0ExploitedOct 21, 2020CVE-2020-14882
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedOct 21, 2020CVE-2020-14883
Oracle WebLogic Server Unspecified Vulnerability
high7.2ExploitedOct 21, 2020CVE-2020-14644
Oracle WebLogic Server Remote Code Execution Vulnerability
critical9.8ExploitedJul 15, 2020CVE-2020-2883
Oracle WebLogic Server Unspecified Vulnerability
critical9.8ExploitedApr 15, 2020CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedJan 15, 2020CVE-2020-2555
Oracle Multiple Products Remote Code Execution Vulnerability
critical9.8ExploitedJan 15, 2020CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
high8.8ExploitedOct 16, 2019CVE-2019-2725
Oracle WebLogic Server, Injection
critical9.8ExploitedApr 26, 2019CVE-2019-2616
Oracle BI Publisher Unauthorized Access Vulnerability
high7.2ExploitedApr 23, 2019CVE-2018-2628
Oracle WebLogic Server Unspecified Vulnerability
critical9.8ExploitedApr 19, 2018CVE-2017-10271
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
high7.5ExploitedOct 19, 2017CVE-2017-3506
Oracle WebLogic Server OS Command Injection Vulnerability
high7.4ExploitedApr 24, 2017CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
critical9.8ExploitedApr 21, 2016CVE-2015-4852
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedNov 18, 2015CVE-2015-4902
Oracle Java SE Integrity Check Vulnerability
medium5.3ExploitedOct 22, 2015CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
critical9.8ExploitedJul 16, 2015CVE-2013-2465
Oracle Java SE Unspecified Vulnerability
critical9.8ExploitedJun 18, 2013CVE-2013-2423
Oracle JRE Unspecified Vulnerability
low3.7ExploitedApr 17, 2013CVE-2013-0431
Oracle JRE Sandbox Bypass Vulnerability
low3.7ExploitedJan 31, 2013CVE-2013-0422
Oracle JRE Remote Code Execution Vulnerability
critical9.8ExploitedJan 10, 2013CVE-2012-0518
Oracle Fusion Middleware Unspecified Vulnerability
medium4.7ExploitedOct 16, 2012CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability
critical9.1ExploitedOct 16, 2012CVE-2012-5076
Oracle Java SE Sandbox Bypass Vulnerability
critical9.8ExploitedOct 16, 2012CVE-2012-4681
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedAug 28, 2012CVE-2012-1723
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedJun 16, 2012CVE-2012-0507
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedJun 7, 2012CVE-2012-1710
Oracle Fusion Middleware Unspecified Vulnerability
critical9.8ExploitedMay 3, 2012CVE-2011-3544
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
critical9.8ExploitedOct 19, 2011CVE-2010-0840
Oracle JRE Unspecified Vulnerability
critical9.8ExploitedApr 1, 2010CVE-2008-3431
Oracle VirtualBox Insufficient Input Validation Vulnerability
high8.8ExploitedAug 5, 2008
