LIVE · cybersecurity feed
Live wire
vendor1 exploited in the wild

Oracle

300 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical300
High0
Medium0
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-35273exploited9.8criticalpeoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environmen87d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-4680310criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).80d ago
CVE-2026-4684010criticalrest data servicesVulnerability in Oracle REST Data Services (component: Backend-as-a-Service).100d ago
CVE-2026-4680010criticalwebcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).80d ago
CVE-2026-4684610criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).80d ago
CVE-2026-6021710criticalcoherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).46d ago
CVE-2026-3529210criticalweblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).80d ago
CVE-2026-6064410criticalwebcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme46d ago
CVE-2026-7088010criticalhyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an18d ago
CVE-2026-4705610criticaldata integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service).46d ago
CVE-2026-3530710criticalcoherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).80d ago
CVE-2026-3530110criticalweblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).80d ago
CVE-2026-6036510criticalhttp serverVulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic46d ago
CVE-2026-6038910criticalservice delivery platformVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).46d ago
CVE-2026-3530810criticalcoherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars80d ago
CVE-2026-6035810criticalaccess managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).46d ago
CVE-2026-4679810criticalwebcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).80d ago
CVE-2026-4677810criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-6036610criticalplatform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized45d ago
CVE-2026-6124110criticalinternet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).18d ago
CVE-2026-6037910criticalservice delivery platformVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).46d ago
CVE-2026-6036010criticalunified directoryVulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).46d ago
CVE-2026-7092110criticalhyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).18d ago
CVE-2026-4697810criticalsolarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon).80d ago
CVE-2026-4678110criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-625889.9criticalsiebel crmVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).18d ago
CVE-2026-610729.9criticalpeoplesoft enterprise fin staffing front office brazilVulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (componen46d ago
CVE-2026-468249.9criticaluniversal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site100d ago
CVE-2026-606279.9criticaljd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security46d ago
CVE-2026-468559.9criticalenterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta80d ago
CVE-2026-709209.9criticalhyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).18d ago
CVE-2026-613179.9criticalsiebel crmVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).18d ago
CVE-2026-605249.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu46d ago
CVE-2026-609909.9criticalidentity manager connectorVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).18d ago
CVE-2026-603819.9criticalservice delivery platformVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).46d ago
CVE-2026-612429.9criticalpeoplesoft enterprise fin common objectsVulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: S46d ago
CVE-2026-609959.9criticalidentity manager connectorVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).18d ago
CVE-2026-607309.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).18d ago
CVE-2026-610219.9criticalwebcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).18d ago
CVE-2026-605429.9criticalbusiness process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Huma46d ago
CVE-2026-352829.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-605629.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).46d ago
CVE-2026-468959.9criticalenterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor80d ago
CVE-2026-467799.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-469019.9criticalenterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor80d ago
CVE-2026-469089.9criticaljd edwards enterpriseone accounts payableVulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts P80d ago
CVE-2026-352849.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-605529.9criticalwebcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).46d ago
CVE-2026-352819.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-605619.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).46d ago
CVE-2026-467939.9criticalidentity manager connectorVulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User).80d ago
CVE-2026-605379.9criticalmanaged file transferVulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Serv46d ago
CVE-2026-607119.9criticalsiebel crmVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).46d ago
CVE-2026-605659.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).46d ago
CVE-2026-607209.9criticalidentity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).18d ago
CVE-2026-467929.9criticalidentity manager connectorVulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Conne80d ago
CVE-2026-468449.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).80d ago
CVE-2026-624529.9criticalsiebel crmVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).18d ago
CVE-2026-469649.9criticaluniversal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site80d ago
CVE-2026-604229.9criticalunified directoryVulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).46d ago
CVE-2026-468549.9criticalenterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Targ80d ago
CVE-2026-604029.9criticaltimesten in-memory databaseVulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kuberne46d ago
CVE-2026-710599.9criticalbi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).18d ago
CVE-2026-467829.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-612099.9criticalpeoplesoft in-memory project discoveryVulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: Project Disco46d ago
CVE-2026-602069.9criticalweblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).46d ago
CVE-2026-612379.9criticalpeoplesoft enterprise fin common objectsVulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: I46d ago
CVE-2026-603339.9criticalaccess managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).46d ago
CVE-2026-469009.9criticalenterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor80d ago
CVE-2026-604619.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu46d ago
CVE-2026-603699.9criticalplatform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized45d ago
CVE-2026-607199.9criticalbi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).46d ago
CVE-2026-604569.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu46d ago
CVE-2026-604579.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu46d ago
CVE-2026-612489.9criticalinternet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).18d ago
CVE-2026-468149.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).80d ago
CVE-2026-604599.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu46d ago
CVE-2026-605479.9criticalmanaged file transferVulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Serv46d ago
CVE-2026-352639.9criticalweblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).80d ago
CVE-2026-607029.9criticalweblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).18d ago
CVE-2026-606639.9criticalwebcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme46d ago
CVE-2026-603619.9criticalunified directoryVulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).46d ago
CVE-2026-467759.9criticalrest data servicesVulnerability in Oracle REST Data Services (component: Core).100d ago
CVE-2026-467949.9criticalidentity manager connectorVulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Conne80d ago
CVE-2026-352949.9criticalidentity managerVulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connecto80d ago
CVE-2026-469339.9criticalapplications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operation80d ago
CVE-2026-468939.9criticaljd edwards enterpriseone general ledgerVulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundatio80d ago
CVE-2026-467659.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).80d ago
CVE-2026-469189.9criticalprocess manufacturing product developmentVulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (componen80d ago
CVE-2026-467679.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).80d ago
CVE-2026-468399.9criticalrest data servicesVulnerability in Oracle REST Data Services (component: Core).100d ago
CVE-2026-352839.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-469079.9criticaljd edwards enterpriseone global order promisingVulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promi80d ago
CVE-2026-468479.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).80d ago
CVE-2026-352859.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu80d ago
CVE-2026-609169.9criticalwebcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu18d ago
CVE-2026-625129.9criticalsiebel crmVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).18d ago
CVE-2026-469639.9criticaluniversal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site80d ago
CVE-2026-468979.9criticalenterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Cor80d ago
CVE-2026-468509.9criticalmysql shellVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code).80d ago
CVE-2026-605689.9criticalwebcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).46d ago

Filter the full tracker by Oracle

Our coverage of Oracle

patch

You could've applied all 1,449 Oracle patches and still been hit by this attack

Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert

vulnerability

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Disclosed in January and honeypots buzzed soon after, CISA says it’s finally time for the USG to plug the gap

CVE-2026-21962

CISA Warns of Exploited Oracle WebLogic Vulnerability

The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The post CISA Warns of Exploited Oracle WebLogic Vulnerability appeared first on SecurityWeek.

CVE-2026-21962critical

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attacker with network access via HTTP to

vulnerabilitycritical

Oracle Critical Patch Update, August 2026 Security Update Review

Oracle released its August edition of Critical Patch Update. The update received patches for 943 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this Oracle Critical Patch Update, Oracle Fusion Middleware and Oracle

vulnerability

943 Patches Rolled Out With Oracle’s August 2026 Security Update

The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs. The post 943 Patches Rolled Out With Oracle’s August 2026 Security Update appeared first on SecurityWeek.

vulnerabilitycritical

Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs

Oracle addresses 925 CVEs in its August 2026 Critical Security Patch Update with 943 patches, including 154 critical updates. Key Takeaways The August 2026 Critical Security Patch Update (CSPU) contains fixes for 925 unique CVEs in 943 security updates 154 issues (16.3% of all patches) were assigned a critical severity rating Oracle Fusion Middleware received the highest number of patches at 262,

security

Toolkit Hidden Inside Oracle Database Evades Endpoint Tools

Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database

breach

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. [...]

vulnerability

Oracle drops 1,449 security patches like it's the new normal

Experts say the era of AI bug hunting is here, so defenders will simply have to adapt to busier workloads

vulnerabilitycritical

Oracle Critical Patch Update, July 2026 Security Update Review

Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 1449 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this quarterly Oracle Critical Patch Update, Orac

vulnerabilitycritical

Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates

Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. The post Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates appeared first on SecurityWeek.