Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
46 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Aug 24, 2026 | CVE-2026-21962 | Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | Critical 10.0 | 73.2% | Aug 27, 2026 |
| Jul 15, 2026 | CVE-2026-46817 | Oracle · E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | Critical 9.8 | 12.3% | Jul 18, 2026 |
| Jun 12, 2026 | CVE-2026-35273 Ransomware | Oracle · PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 96.7% | Jun 15, 2026 |
| Jun 1, 2026 | CVE-2024-21182 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.5 | 74.2% | Jun 4, 2026 |
| Nov 21, 2025 | CVE-2025-61757 | Oracle · Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 88.6% | Dec 12, 2025 |
| Oct 20, 2025 | CVE-2025-61884 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | High 7.5 | 95.9% | Nov 10, 2025 |
| Oct 6, 2025 | CVE-2025-61882 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Critical 9.8 | 99.7% | Oct 27, 2025 |
| Feb 24, 2025 | CVE-2024-20953 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | High 8.8 | 3.9% | Mar 17, 2025 |
| Jan 7, 2025 | CVE-2020-2883 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | Critical 9.8 | 94.6% | Jan 28, 2025 |
| Nov 21, 2024 | CVE-2024-21287 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | High 7.5 | 1.7% | Dec 12, 2024 |
| Sep 18, 2024 | CVE-2022-21445 | Oracle · ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 62.5% | Oct 9, 2024 |
| Sep 18, 2024 | CVE-2020-14644 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 94.5% | Oct 9, 2024 |
| Jun 3, 2024 | CVE-2017-3506 | Oracle · WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | High 7.4 | 96.0% | Jun 24, 2024 |
| Nov 16, 2023 | CVE-2020-2551 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.8 | 92.8% | Dec 7, 2023 |
| May 12, 2023 | CVE-2016-3427 | Oracle · Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | Critical 9.8 | 92.3% | Jun 2, 2023 |
| May 1, 2023 | CVE-2023-21839 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.5 | 99.9% | May 22, 2023 |
| Feb 2, 2023 | CVE-2022-21587 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Critical 9.8 | 98.3% | Feb 23, 2023 |
| Nov 28, 2022 | CVE-2021-35587 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.8 | 96.3% | Dec 19, 2022 |
| Sep 8, 2022 | CVE-2018-2628 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | Critical 9.8 | 100.0% | Sep 29, 2022 |
| May 25, 2022 | CVE-2019-3010 | Oracle · Solaris | Oracle Solaris Privilege Escalation Vulnerability | High 8.8 | 13.5% | Jun 15, 2022 |
| May 25, 2022 | CVE-2013-2423 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | Low 3.7 | 85.2% | Jun 15, 2022 |
| May 25, 2022 | CVE-2013-0431 Ransomware | Oracle · Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | Low 3.7 | 90.1% | Jun 15, 2022 |
| May 25, 2022 | CVE-2013-0422 Ransomware | Oracle · Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | Critical 9.8 | 97.1% | Jun 15, 2022 |
| May 25, 2022 | CVE-2012-1710 Ransomware | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.8 | 7.8% | Jun 15, 2022 |
| May 25, 2022 | CVE-2010-0840 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | Critical 9.8 | 96.3% | Jun 15, 2022 |
| Mar 28, 2022 | CVE-2013-2465 Ransomware | Oracle · Java SE | Oracle Java SE Unspecified Vulnerability | Critical 9.8 | 98.8% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-5076 | Oracle · Java SE | Oracle Java SE Sandbox Bypass Vulnerability | Critical 9.8 | 91.2% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-0518 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Medium 4.7 | 4.7% | Apr 18, 2022 |
| Mar 25, 2022 | CVE-2019-2616 | Oracle · BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | High 7.2 | 92.2% | Apr 15, 2022 |
| Mar 3, 2022 | CVE-2015-4902 | Oracle · Java SE | Oracle Java SE Integrity Check Vulnerability | Medium 5.3 | 13.6% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2015-2590 | Oracle · Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | Critical 9.8 | 25.5% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2012-4681 Ransomware | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Critical 9.8 | 98.5% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2012-1723 Ransomware | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Critical 9.8 | 93.6% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2012-0507 Ransomware | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Critical 9.8 | 98.2% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2011-3544 | Oracle · Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Critical 9.8 | 96.7% | Mar 24, 2022 |
| Mar 3, 2022 | CVE-2008-3431 | Oracle · VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | High 8.8 | 6.9% | Mar 24, 2022 |
| Feb 10, 2022 | CVE-2017-10271 Ransomware | Oracle · WebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | High 7.5 | 100.0% | Aug 10, 2022 |
| Jan 18, 2022 | CVE-2020-14864 | Oracle · Intelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | High 7.5 | 97.2% | Jul 18, 2022 |
| Jan 10, 2022 | CVE-2019-2725 Ransomware | Oracle · WebLogic Server | Oracle WebLogic Server, Injection | High 7.5 | 100.0% | Jul 10, 2022 |
| Nov 3, 2021 | CVE-2020-2555 | Oracle · Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 97.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14883 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.2 | 97.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14882 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14871 | Oracle · Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | Critical 10.0 | 80.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14750 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 99.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2015-4852 | Oracle · WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 95.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2012-3152 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.1 | 98.8% | May 3, 2022 |