https://exploit-radar.com/en/flux/marques/oracle.xml Exploit Radar: exploited Oracle vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Oracle products. 2026-08-24T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-21962/ CVE-2026-21962 — Oracle WebLogic Server 2026-08-24T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 24, 2026. https://exploit-radar.com/en/cve/CVE-2026-46817/ CVE-2026-46817 — Oracle E-Business Suite 2026-07-15T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 15, 2026. https://exploit-radar.com/en/cve/CVE-2026-35273/ CVE-2026-35273 — Oracle PeopleSoft 2026-06-12T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 12, 2026. https://exploit-radar.com/en/cve/CVE-2024-21182/ CVE-2024-21182 — Oracle WebLogic Server 2026-06-01T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. For cloud services, follow the guidance from Oracle. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 1, 2026. https://exploit-radar.com/en/cve/CVE-2025-61757/ CVE-2025-61757 — Oracle Identity and Access Management (OIM / OAM) 2025-11-21T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. For cloud services, follow the guidance from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 21, 2025. https://exploit-radar.com/en/cve/CVE-2025-61884/ CVE-2025-61884 — Oracle E-Business Suite 2025-10-20T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. For cloud services, follow the guidance from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 20, 2025. https://exploit-radar.com/en/cve/CVE-2025-61882/ CVE-2025-61882 — Oracle E-Business Suite 2025-10-06T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. For cloud services, follow the guidance from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 6, 2025. https://exploit-radar.com/en/cve/CVE-2024-20953/ CVE-2024-20953 — Oracle Agile PLM 2025-02-24T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 24, 2025. https://exploit-radar.com/en/cve/CVE-2020-2883/ CVE-2020-2883 — Oracle WebLogic Server 2025-01-07T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2025. https://exploit-radar.com/en/cve/CVE-2024-21287/ CVE-2024-21287 — Oracle Agile PLM 2024-11-21T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 21, 2024. https://exploit-radar.com/en/cve/CVE-2020-14644/ CVE-2020-14644 — Oracle WebLogic Server 2024-09-18T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2024. https://exploit-radar.com/en/cve/CVE-2022-21445/ CVE-2022-21445 — Oracle ADF Faces 2024-09-18T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2024. https://exploit-radar.com/en/cve/CVE-2017-3506/ CVE-2017-3506 — Oracle WebLogic Server 2024-06-03T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 3, 2024. https://exploit-radar.com/en/cve/CVE-2020-2551/ CVE-2020-2551 — Oracle WebLogic Server 2023-11-16T00:00:00Z Apply the patches or mitigations from Oracle; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 16, 2023. https://exploit-radar.com/en/cve/CVE-2016-3427/ CVE-2016-3427 — Oracle Java SE (JRE / JDK) 2023-05-12T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 12, 2023. https://exploit-radar.com/en/cve/CVE-2023-21839/ CVE-2023-21839 — Oracle WebLogic Server 2023-05-01T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2023. https://exploit-radar.com/en/cve/CVE-2022-21587/ CVE-2022-21587 — Oracle E-Business Suite 2023-02-02T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 2, 2023. https://exploit-radar.com/en/cve/CVE-2021-35587/ CVE-2021-35587 — Oracle Identity and Access Management (OIM / OAM) 2022-11-28T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 28, 2022. https://exploit-radar.com/en/cve/CVE-2018-2628/ CVE-2018-2628 — Oracle WebLogic Server 2022-09-08T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2022. https://exploit-radar.com/en/cve/CVE-2010-0840/ CVE-2010-0840 — Oracle Java SE (JRE / JDK) 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2012-1710/ CVE-2012-1710 — Oracle Fusion Middleware 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2013-0422/ CVE-2013-0422 — Oracle Java SE (JRE / JDK) 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2019-3010/ CVE-2019-3010 — Oracle Solaris 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2013-0431/ CVE-2013-0431 — Oracle Java SE (JRE / JDK) 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2013-2423/ CVE-2013-2423 — Oracle Java SE (JRE / JDK) 2022-05-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2012-5076/ CVE-2012-5076 — Oracle Java SE (JRE / JDK) 2022-03-28T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2013-2465/ CVE-2013-2465 — Oracle Java SE (JRE / JDK) 2022-03-28T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2012-0518/ CVE-2012-0518 — Oracle Identity and Access Management (OIM / OAM) 2022-03-28T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2019-2616/ CVE-2019-2616 — Oracle Business Intelligence (OBIEE / BI Publisher) 2022-03-25T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2011-3544/ CVE-2011-3544 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2012-0507/ CVE-2012-0507 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2012-1723/ CVE-2012-1723 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2012-4681/ CVE-2012-4681 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2015-2590/ CVE-2015-2590 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2008-3431/ CVE-2008-3431 — Oracle VirtualBox 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2015-4902/ CVE-2015-4902 — Oracle Java SE (JRE / JDK) 2022-03-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2017-10271/ CVE-2017-10271 — Oracle WebLogic Server 2022-02-10T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2022. https://exploit-radar.com/en/cve/CVE-2020-14864/ CVE-2020-14864 — Oracle Business Intelligence (OBIEE / BI Publisher) 2022-01-18T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022. https://exploit-radar.com/en/cve/CVE-2019-2725/ CVE-2019-2725 — Oracle WebLogic Server 2022-01-10T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2022. https://exploit-radar.com/en/cve/CVE-2020-14871/ CVE-2020-14871 — Oracle Solaris 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2015-4852/ CVE-2015-4852 — Oracle WebLogic Server 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-14750/ CVE-2020-14750 — Oracle WebLogic Server 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-14882/ CVE-2020-14882 — Oracle WebLogic Server 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-2555/ CVE-2020-2555 — Oracle Coherence 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2012-3152/ CVE-2012-3152 — Oracle Fusion Middleware 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-14883/ CVE-2020-14883 — Oracle WebLogic Server 2021-11-03T00:00:00Z Apply the security update from Oracle. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.