VulnSea

oracle has 2,050 CVEs on record between 2012 and 2026. Disclosure cadence is accelerating: 1734 in the last 90 days against 167 in the 90 before. The busiest recent month was October 2026 with 1013. The median CVSS is 7.5 (high), with 248 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 1283 days (12 cases). The dominant weakness classes are CWE-284 (527) and CWE-269 (164). Most affected products: PeopleSoft Enterprise PeopleTools (88), JD Edwards EnterpriseOne Tools (84), hyperion_financial_management (83).

CVEs per month

Last 12 months, by publish date

120102030405060708091011
Exploited share
1% vs 1% corpus
Median CVSS
7.5
Publish → KEV
1283 d median(12)
Last 90 days
1734 prev 167

Products

  • PeopleSoft Enterprise PeopleTools 88
  • JD Edwards EnterpriseOne Tools 84
  • hyperion_financial_management 83
  • Siebel CRM Deployment 56
  • Oracle Business Intelligence Enterprise Edition 55
  • Oracle Java SE 49
Follow oracle:RSS feedSave a search →Embed badge ↗
2050
Total CVEs
248
Critical
12
CISA KEV
12
Exploited

Worst active — by depth score

oracle vulnerabilities

CVEs affecting oracle, newest first. Open any entry for full detail, references, and exploit status.

2050 CVEsRSS

CVE-2026-91299Critical· 10.0
2w ago

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security)

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauth…

▾ MidnightOracle Corporation · JD Edwards EnterpriseOne OrchestratorEPSS 0.49%via CVEORG
CVE-2026-91306High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attac…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.12%via CVEORG
CVE-2026-91304High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.14%via CVEORG
CVE-2026-91303High· 8.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.29%via CVEORG
CVE-2026-91310High· 8.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker w…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.30%via CVEORG
CVE-2026-91308High· 7.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.32%via CVEORG
CVE-2026-91307High· 7.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.32%via CVEORG
CVE-2026-91305Critical· 9.1
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ MidnightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.44%via CVEORG
CVE-2026-91312Medium· 6.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attac…

▾ SunlitOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.15%via CVEORG
CVE-2026-91311High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attac…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.15%via CVEORG
CVE-2026-91318Medium· 6.5
2w ago

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework)

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated att…

▾ SunlitOracle Corporation · Oracle JDeveloperEPSS 0.33%via CVEORG
CVE-2026-91314High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.14%via CVEORG
CVE-2026-91313High· 8.1
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Difficult to exploit vulnerability allows unauthenticated at…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.37%via CVEORG
CVE-2026-91317Medium· 5.9
2w ago

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding)

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attac…

▾ SunlitOracle Corporation · Oracle JDeveloperEPSS 0.29%via CVEORG
CVE-2026-91316High· 7.2
2w ago

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog)

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with …

▾ TwilightOracle Corporation · iProcurementEPSS 0.43%via CVEORG
CVE-2026-91315High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.17%via CVEORG
CVE-2026-91322Low· 3.3
2w ago

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper)

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attac…

▾ SunlitOracle Corporation · Oracle JDeveloperEPSS 0.14%via CVEORG
CVE-2026-91321High· 7.5
2w ago

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management)

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with ne…

▾ TwilightOracle Corporation · iProcurementEPSS 0.30%via CVEORG
CVE-2026-91320Medium· 5.7
2w ago

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper)

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows high privileged at…

▾ SunlitOracle Corporation · Oracle JDeveloperEPSS 0.11%via CVEORG
CVE-2026-91319Medium· 5.9
2w ago

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects)

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticate…

▾ SunlitOracle Corporation · Oracle JDeveloperEPSS 0.27%via CVEORG
CVE-2026-91326High· 8.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.21%via CVEORG
CVE-2026-91325High· 7.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated atta…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.40%via CVEORG
CVE-2026-91323Critical· 9.8
2w ago

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unau…

▾ MidnightOracle Corporation · Oracle WebLogic ServerEPSS 0.50%via CVEORG
CVE-2026-91328High· 7.8
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker wi…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.12%via CVEORG
CVE-2026-91327High· 7.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated at…

▾ TwilightOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.20%via CVEORG
CVE-2026-91324Medium· 4.7
2w ago

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries)

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure w…

▾ SunlitOracle Corporation · Oracle SolarisEPSS 0.12%via CVEORG
CVE-2026-91331Low· 3.8
2w ago

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects)

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high …

▾ SunlitOracle Corporation · PeopleSoft Enterprise CC Common Application ObjectsEPSS 0.24%via CVEORG
CVE-2026-91330Low· 3.3
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attac…

▾ SunlitOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.10%via CVEORG
CVE-2026-91329Medium· 6.5
2w ago

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated at…

▾ SunlitOracle Corporation · JD Edwards EnterpriseOne ToolsEPSS 0.12%via CVEORG
CVE-2026-91336Medium· 6.5
2w ago

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where …

▾ SunlitOracle Corporation · Oracle SolarisEPSS 0.12%via CVEORG
oracle vulnerabilities (CVEs) — page 25 · VulnSea