KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Vendor dossier / #6

Oracle vulnerabilities in CISA KEV

Catalog
2026.09.23
Rank
#6 of 283
Updated
2026-08-24

Answer CISA's KEV catalog lists 46 Oracle vulnerabilities as of catalog 2026.09.23, 2.7% of all 1,721 entries and rank 6 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2026-08-24; 13 are flagged as used in ransomware campaigns.

KEV entries
462.7% of catalog
Last 90 days
+2added
Ransomware: known
1328.3%
Products
17distinct
First added
2021-11-03
Latest added
2026-08-24
Median days to due
21
Open deadlines
0federal

TAdditions per quarter

Oracle KEV additions per quarterColumn chart of KEV additions per quarter from 2021Q4 to 2026Q3. Peak: 14 in 2022Q1.0510152021Q4: 7 added2021 Q42022Q1: 14 added2022Q2: 6 added2022Q3: 1 added2022Q4: 1 added2022 Q42023Q1: 1 added2023Q2: 2 added2023Q3: 0 added2023Q4: 1 added2023 Q42024Q1: 0 added2024Q2: 1 added2024Q3: 2 added2024Q4: 1 added2024 Q42025Q1: 2 added2025Q2: 0 added2025Q3: 0 added2025Q4: 3 added2025 Q42026Q1: 0 added2026Q2: 2 added2026Q3: 2 added
Table view (by year)
Oracle KEV additions by year
YearAdded
20217
202222
20234
20244
20255
20264

QCommon questions

How many Oracle vulnerabilities are in CISA KEV?

46, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 2.7% of the catalog.

Which Oracle product has the most KEV entries?

WebLogic Server, with 12 entries. 17 products appear in total.

How many Oracle KEV vulnerabilities are linked to ransomware?

13 of 46 (28.3%) are flagged by CISA as known to be used in ransomware campaigns.

When was the latest Oracle vulnerability added to KEV?

2026-08-24 (CVE-2026-21962).

What is the most common weakness in Oracle KEV entries?

CWE-502 (Unsafe deserialization), listed on 6 entries.

PProducts

Oracle products in KEV
ProductEntriesShare of vendor
WebLogic Server1226.1%
Java SE715.2%
Fusion Middleware613%
E-Business Suite48.7%
Java Runtime Environment (JRE)48.7%
Agile Product Lifecycle Management (PLM)24.3%
HTTP Server and Oracle Weblogic Server Proxy Plug-in12.2%
PeopleSoft Enterprise PeopleTools12.2%
ADF Faces12.2%
Java SE and JRockit12.2%
Solaris12.2%
BI Publisher (Formerly XML Publisher)12.2%
Java SE JDK and JRE12.2%
VirtualBox12.2%
Intelligence Enterprise Edition12.2%
Multiple Products12.2%
Solaris and Zettabyte File System (ZFS)12.2%

WWeaknesses

entries can list several CWEs
CWEs in Oracle KEV entries
CWEEntriesShare of vendor
CWE-502 Unsafe deserialization613%
CWE-306 Missing authentication48.7%
CWE-264 Permissions and access controls (category)24.3%
CWE-284 Improper access control12.2%
CWE-269 Improper privilege management12.2%
CWE-287 Improper authentication12.2%
CWE-918 Server-side request forgery12.2%
CWE-863 Incorrect authorization12.2%
CWE-78 OS command injection12.2%
CWE-79012.2%
CWE-60112.2%
CWE-22 Path traversal12.2%
No CWE listed2656.5%

EAll 46 entries

All Oracle entries in CISA KEV, newest first
CVEProductVulnerabilityAddedDueRansomwareCWE
CVE-2026-21962HTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-46817E-Business SuiteOracle E-Business Suite Improper Privilege Management VulnerabilityUnknownCWE-269, CWE-287, CWE-306
CVE-2026-35273 PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityKnownCWE-306
CVE-2024-21182WebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2025-61757Fusion MiddlewareOracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2025-61884E-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKnownCWE-918
CVE-2025-61882E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityKnownnone listed
CVE-2024-20953Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Deserialization VulnerabilityUnknownCWE-502
CVE-2020-2883WebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2024-21287Agile Product Lifecycle Management (PLM)Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityUnknownCWE-863
CVE-2022-21445ADF FacesOracle ADF Faces Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2020-14644WebLogic ServerOracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2017-3506WebLogic ServerOracle WebLogic Server OS Command Injection VulnerabilityUnknownCWE-78
CVE-2020-2551Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownnone listed
CVE-2016-3427Java SE and JRockitOracle Java SE and JRockit Unspecified VulnerabilityUnknownnone listed
CVE-2023-21839WebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2022-21587E-Business SuiteOracle E-Business Suite Unspecified VulnerabilityKnownCWE-306
CVE-2021-35587Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownCWE-502, CWE-790
CVE-2018-2628WebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownCWE-502
CVE-2019-3010SolarisOracle Solaris Privilege Escalation VulnerabilityUnknownnone listed
CVE-2013-2423Java Runtime Environment (JRE)Oracle JRE Unspecified VulnerabilityUnknownnone listed
CVE-2013-0431Java Runtime Environment (JRE)Oracle JRE Sandbox Bypass VulnerabilityKnownnone listed
CVE-2013-0422Java Runtime Environment (JRE)Oracle JRE Remote Code Execution VulnerabilityKnownCWE-264
CVE-2012-1710Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityKnownnone listed
CVE-2010-0840Java Runtime Environment (JRE)Oracle JRE Unspecified VulnerabilityUnknownnone listed
CVE-2013-2465Java SEOracle Java SE Unspecified VulnerabilityKnownnone listed
CVE-2012-5076Java SEOracle Java SE Sandbox Bypass VulnerabilityUnknownnone listed
CVE-2012-0518Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownCWE-601
CVE-2019-2616BI Publisher (Formerly XML Publisher)Oracle BI Publisher Unauthorized Access VulnerabilityUnknownnone listed
CVE-2015-4902Java SEOracle Java SE Integrity Check VulnerabilityUnknownnone listed
CVE-2015-2590Java SEOracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityUnknownnone listed
CVE-2012-4681Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2012-1723Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2012-0507Java SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKnownnone listed
CVE-2011-3544Java SE JDK and JREOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityUnknownnone listed
CVE-2008-3431VirtualBoxOracle VirtualBox Insufficient Input Validation VulnerabilityUnknownCWE-264
CVE-2017-10271WebLogic ServerOracle Corporation WebLogic Server Remote Code Execution VulnerabilityKnownnone listed
CVE-2020-14864Intelligence Enterprise EditionOracle Business Intelligence Enterprise Edition Path TransversalUnknownCWE-22
CVE-2019-2725WebLogic ServerOracle WebLogic Server, InjectionKnownCWE-74
CVE-2020-2555Multiple ProductsOracle Multiple Products Remote Code Execution VulnerabilityUnknownCWE-502
CVE-2020-14883WebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2020-14882WebLogic ServerOracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2020-14871Solaris and Zettabyte File System (ZFS)Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityUnknownCWE-787
CVE-2020-14750WebLogic ServerOracle WebLogic Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2015-4852WebLogic ServerOracle WebLogic Server Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2012-3152Fusion MiddlewareOracle Fusion Middleware Unspecified VulnerabilityUnknownnone listed

Cite this

CISA's Known Exploited Vulnerabilities catalog lists 46 Oracle vulnerabilities (2.7% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/oracle/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Oracle beyond this data.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API