Oracle Corporation has 1,339 CVEs on record. Disclosure cadence is accelerating: 1336 in the last 90 days against 3 in the 90 before. The busiest recent month was October 2026 with 998. The median CVSS is 7.2 (high), with 100 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-284 (186) and CWE-269 (88). Most affected products: PeopleSoft Enterprise PeopleTools (88), JD Edwards EnterpriseOne Tools (84), Siebel CRM Deployment (56).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 1336 prev 3
Weakness classes
Products
- PeopleSoft Enterprise PeopleTools 88
- JD Edwards EnterpriseOne Tools 84
- Siebel CRM Deployment 56
- Oracle Business Intelligence Enterprise Edition 55
- Oracle Java SE 45
- Oracle Essbase 36
Worst active — by depth score
CVE-2026-101767Critical· 9.8Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)66CVE-2026-114820Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)62CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)62CVE-2026-91663Critical· 9.9Vulnerability in Oracle Essbase (component: Security)55CVE-2026-91658Critical· 9.9Vulnerability in Oracle Essbase (component: Security)55
Oracle Corporation vulnerabilities
CVEs affecting Oracle Corporation, newest first. Open any entry for full detail, references, and exploit status.
1339 CVEsRSS
CVE-2026-101388High· 7.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network ac…
CVE-2026-101387High· 7.6Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
CVE-2026-101384Medium· 5.0Vulnerability in Oracle REST Data Services (component: Core)
Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST…
CVE-2026-101394Medium· 5.3Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access v…
CVE-2026-101391Medium· 6.1Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access v…
CVE-2026-101390High· 8.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker …
CVE-2026-101397Low· 2.2Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access…
CVE-2026-101395Medium· 6.1Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access v…
CVE-2026-101392Medium· 5.5Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infr…
CVE-2026-101399Medium· 5.3Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access v…
CVE-2026-101398High· 7.6Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw…
CVE-2026-101396Medium· 4.7Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the in…
CVE-2026-101393Medium· 4.3Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access v…
CVE-2026-101404Low· 3.9Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows high privileged attacker with logon to the i…
CVE-2026-101402Low· 3.7Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network …
CVE-2026-101400Low· 2.9Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the i…
CVE-2026-101410High· 7.5Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker w…
CVE-2026-101409High· 7.5Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker w…
CVE-2026-101403Medium· 5.9Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network …
CVE-2026-101401Low· 2.9Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the i…
CVE-2026-101407Medium· 5.5Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attac…
CVE-2026-101406Low· 3.7Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2026-101405Medium· 4.8Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2026-101412Medium· 5.8Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2026-101411High· 8.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker …
CVE-2026-101408Medium· 6.1Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing)
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network ac…
CVE-2026-101426Medium· 6.9Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to t…
CVE-2026-101419Medium· 6.5Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network acces…
CVE-2026-101414Low· 2.9Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon …
CVE-2026-101413Medium· 5.3Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server)
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with…