Oracle Corporation has 1,339 CVEs on record. Disclosure cadence is accelerating: 1336 in the last 90 days against 3 in the 90 before. The busiest recent month was October 2026 with 998. The median CVSS is 7.2 (high), with 100 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-284 (186) and CWE-269 (88). Most affected products: PeopleSoft Enterprise PeopleTools (88), JD Edwards EnterpriseOne Tools (84), Siebel CRM Deployment (56).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 1336 prev 3
Weakness classes
Products
- PeopleSoft Enterprise PeopleTools 88
- JD Edwards EnterpriseOne Tools 84
- Siebel CRM Deployment 56
- Oracle Business Intelligence Enterprise Edition 55
- Oracle Java SE 45
- Oracle Essbase 36
Worst active — by depth score
CVE-2026-101767Critical· 9.8Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)66CVE-2026-114820Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)62CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)62CVE-2026-91663Critical· 9.9Vulnerability in Oracle Essbase (component: Security)55CVE-2026-91658Critical· 9.9Vulnerability in Oracle Essbase (component: Security)55
Oracle Corporation vulnerabilities
CVEs affecting Oracle Corporation, newest first. Open any entry for full detail, references, and exploit status.
1339 CVEsRSS
CVE-2026-114820Critical· 9.1PoCVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2,…
CVE-2026-91403Critical· 9.1PoC⚖ disputedVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21…
CVE-2026-101361Medium· 4.2Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle RE…
CVE-2026-101360Medium· 5.4Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST…
CVE-2026-101363Medium· 5.3Vulnerability in Oracle REST Data Services (component: Graph QL)
Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2026-101362Medium· 6.9Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle R…
CVE-2026-101367Medium· 5.4Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST …
CVE-2026-101366Medium· 4.3Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST …
CVE-2026-101364Medium· 5.4Vulnerability in Oracle REST Data Services (component: Database Actions)
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-101359Medium· 5.3Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle RES…
CVE-2026-101372Low· 3.7Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle R…
CVE-2026-101368Medium· 5.4Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)
Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr…
CVE-2026-101365Medium· 4.7Vulnerability in Oracle REST Data Services (component: Database Actions)
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis…
CVE-2026-101373Low· 2.4Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle RES…
CVE-2026-101371Low· 3.1Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle R…
CVE-2026-101370Low· 3.1Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle R…
CVE-2026-101369Medium· 6.1Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)
Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr…
CVE-2026-101375Medium· 6.3Vulnerability in Oracle REST Data Services (component: Database Actions)
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-101374Medium· 5.9Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)
Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to com…
CVE-2026-101381Medium· 5.4Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST …
CVE-2026-101379Medium· 5.3Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST…
CVE-2026-101378Medium· 4.3Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST …
CVE-2026-101376Medium· 4.7Vulnerability in Oracle REST Data Services (component: Database Actions)
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis…
CVE-2026-101383Medium· 5.4Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle RES…
CVE-2026-101380Medium· 5.4Vulnerability in Oracle REST Data Services (component: ADP)
Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST …
CVE-2026-101377Low· 2.7Vulnerability in Oracle REST Data Services (component: Database Actions)
Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis…
CVE-2026-101386Medium· 4.2Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle RE…
CVE-2026-101385Medium· 4.9Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle RES…
CVE-2026-101382Medium· 4.2Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle RE…
CVE-2026-101389Medium· 5.9Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker …