oracle has 2,050 CVEs on record between 2012 and 2026. Disclosure cadence is accelerating: 1734 in the last 90 days against 167 in the 90 before. The busiest recent month was October 2026 with 1013. The median CVSS is 7.5 (high), with 248 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 1283 days (12 cases). The dominant weakness classes are CWE-284 (527) and CWE-269 (164). Most affected products: PeopleSoft Enterprise PeopleTools (88), JD Edwards EnterpriseOne Tools (84), hyperion_financial_management (83).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 1% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- 1283 d median(12)
- Last 90 days
- 1734 prev 167
Weakness classes
Products
- PeopleSoft Enterprise PeopleTools 88
- JD Edwards EnterpriseOne Tools 84
- hyperion_financial_management 83
- Siebel CRM Deployment 56
- Oracle Business Intelligence Enterprise Edition 55
- Oracle Java SE 49
Worst active — by depth score
CVE-2025-61882Critical· 9.8Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration)100CVE-2019-2725Critical· 9.8Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)100CVE-2012-4681Critical· 9.8Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) usi…100CVE-2012-1723Critical· 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidential…100CVE-2025-61757Critical· 9.8Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)97
oracle vulnerabilities
CVEs affecting oracle, newest first. Open any entry for full detail, references, and exploit status.
2050 CVEsRSS
CVE-2026-101685High· 8.8Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privi…
CVE-2026-101680High· 7.4Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform)
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to …
CVE-2026-101677Medium· 4.3Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2026-101682High· 7.8Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to …
CVE-2026-101681High· 7.0Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2026-101676High· 7.8Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…
CVE-2026-101687High· 7.5Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low pri…
CVE-2026-101686High· 8.8Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privi…
CVE-2026-101684High· 8.3Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows lo…
CVE-2026-101683High· 7.0Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to…
CVE-2026-101695Medium· 6.8Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents)
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker wit…
CVE-2026-101689High· 7.7Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privi…
CVE-2026-101688High· 8.6Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthent…
CVE-2026-101697Medium· 6.1Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI)
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attack…
CVE-2026-101694High· 7.2Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI)
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with ne…
CVE-2026-101690High· 8.2Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider)
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthent…
CVE-2026-101700High· 8.1Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker wit…
CVE-2026-101698High· 7.5Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues)
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged att…
CVE-2026-101696Medium· 6.8Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker wit…
CVE-2026-101692High· 8.8Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI)
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with net…
CVE-2026-101704High· 8.2Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logo…
CVE-2026-101701Medium· 6.0Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high p…
CVE-2026-101699High· 7.5Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents)
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker wit…
CVE-2026-101707High· 7.4Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker …
CVE-2026-101705High· 7.7Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary)
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker wi…
CVE-2026-101703High· 7.5Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acce…
CVE-2026-101713Medium· 5.4Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server)
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access …
CVE-2026-101709Medium· 5.4Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo…
CVE-2026-101708High· 7.5Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net…
CVE-2026-101706Medium· 6.5Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents)
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with …