oracle has 2,050 CVEs on record between 2012 and 2026. Disclosure cadence is accelerating: 1734 in the last 90 days against 167 in the 90 before. The busiest recent month was October 2026 with 1013. The median CVSS is 7.5 (high), with 248 rated critical. 1% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 1283 days (12 cases). The dominant weakness classes are CWE-284 (527) and CWE-269 (164). Most affected products: PeopleSoft Enterprise PeopleTools (88), JD Edwards EnterpriseOne Tools (84), hyperion_financial_management (83).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 1% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- 1283 d median(12)
- Last 90 days
- 1734 prev 167
Weakness classes
Products
- PeopleSoft Enterprise PeopleTools 88
- JD Edwards EnterpriseOne Tools 84
- hyperion_financial_management 83
- Siebel CRM Deployment 56
- Oracle Business Intelligence Enterprise Edition 55
- Oracle Java SE 49
Worst active — by depth score
CVE-2025-61882Critical· 9.8Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration)100CVE-2019-2725Critical· 9.8Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)100CVE-2012-4681Critical· 9.8Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) usi…100CVE-2012-1723Critical· 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidential…100CVE-2025-61757Critical· 9.8Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)97
oracle vulnerabilities
CVEs affecting oracle, newest first. Open any entry for full detail, references, and exploit status.
2050 CVEsRSS
CVE-2026-83162High· 7.4Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core)
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker wit…
CVE-2026-83161High· 7.1Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attack…
CVE-2026-83160High· 8.8Vulnerability in the RDBMS component of Oracle Database Server
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access v…
CVE-2026-83159High· 7.8Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the i…
CVE-2026-83158High· 7.1Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone)
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged …
CVE-2026-83157High· 8.0Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone)
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileg…
CVE-2026-83156High· 7.5Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server
Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker h…
CVE-2026-83155High· 7.3Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with access …
CVE-2026-83154Critical· 9.1Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOA…
CVE-2026-83153High· 8.8Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure)
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2026-83152High· 8.1Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attack…
CVE-2026-83151Critical· 9.8Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler)
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthentica…
CVE-2026-83150High· 7.0Vulnerability in Oracle Application Testing Suite
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing…
CVE-2026-83149Critical· 9.1Vulnerability in Oracle Application Testing Suite
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via H…
CVE-2026-83148High· 8.8Vulnerability in Oracle Application Testing Suite
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via H…
CVE-2026-83147High· 7.8Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory)
Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with lo…
CVE-2026-83146High· 7.7Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI)
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HT…
CVE-2026-83145High· 8.7Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker…
CVE-2026-83144High· 8.7Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management)
Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker…
CVE-2026-83143High· 8.1Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing)
Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network acc…
CVE-2026-83142High· 7.7Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with net…
CVE-2026-83141High· 7.7Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-83140Medium· 6.5Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-83138High· 8.0Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attack…
CVE-2026-83137High· 8.8Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
CVE-2026-83136High· 8.8Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations)
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
CVE-2026-83135High· 8.7Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce…
CVE-2026-83134High· 7.7Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce…
CVE-2026-83133High· 7.5Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network acc…
CVE-2026-83132High· 8.1Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce…