CyberSIXT Search
Vendor

Oracle

CVEs tracked · all time
29
in CISA KEV · all time
9
articles · since 11 Sep
21
articles · all time
78

21 articles since 11 Sep.

Show as table
Oracle: articles per day
Day (UTC)Articles
Sat 19 Sep1
Mon 21 Sep3
Wed 23 Sep2
Sat 26 Sep1
Mon 28 Sep2
Tue 29 Sep2
Tue 6 Oct1
Wed 7 Oct1
Tue 20 Oct1
Wed 21 Oct4
Thu 22 Oct2
Fri 23 Oct1
See the full timeline
Products: E-Business Suite, Fusion Middleware, HTTP Server and Oracle Weblogic Server Proxy Plug-in, MySQL Cluster and 20 more
E-Business SuiteFusion MiddlewareHTTP Server and Oracle Weblogic Server Proxy Plug-inMySQL ClusterMySQL ServerOracle Access ManagerOracle Application Object LibraryOracle Concurrent ProcessingOracle Database ServerOracle GraalVM Enterprise EditionOracle GraalVM for JDKOracle Identity ManagerOracle Java SEOracle Mobile Field ServiceOracle Product WorkbenchOracle REST Data ServicesOracle SOA SuiteOracle Warehouse ManagementOracle Web Services ManagerOracle WebLogic ServerOracleLinux(7.2) shimPeopleSoft Enterprise PeopleToolsWebLogic ServerWorkflow

CVEs

29 CVEs
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited97%EPSS28articles
CVE-2025-61882Oracle E-Business Suite Unspecified VulnerabilityCVSS9.8CriticalExploited99.7%EPSS7articles
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityCVSS10.0CriticalExploited73%EPSS10articles
CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityCVSS9.8CriticalExploited0.8%EPSS7articles
CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityCVSS7.5HighExploited74%EPSS9articles
CVE-2020-14882Oracle WebLogic Server Remote Code Execution VulnerabilityCVSS9.8CriticalExploited99.9%EPSS1article
CVE-2020-2551Oracle Fusion Middleware Unspecified VulnerabilityCVSS9.8CriticalExploited93%EPSS1article
CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityCVSSUnratedExploited99.9%EPSS1article
CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited89%EPSS2articles
CVE-2026-91403Oracle Corporation Oracle Java SE vulnerabilityCVSS9.1Critical–Not in KEV0.4%EPSS2articles
CVE-2026-101781Oracle Corporation MySQL Server vulnerabilityCVSS8.8High–Not in KEV0.3%EPSS1article
CVE-2026-101809Oracle Corporation Workflow vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS2articles
17 more CVEs
CVE-2026-101767Oracle Corporation Oracle Application Object Library vulnerabilityCVSS9.8Critical–Not in KEV0.6%EPSS2articles
CVE-2026-101808Oracle Corporation Oracle Product Workbench vulnerabilityCVSS9.1Critical–Not in KEV0.4%EPSS1article
CVE-2026-101634Oracle Corporation Oracle Mobile Field Service vulnerabilityCVSS9.1Critical–Not in KEV0.6%EPSS1article
CVE-2026-91221Oracle Corporation Oracle SOA Suite vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS1article
CVE-2026-91231Oracle Corporation Oracle SOA Suite vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS2articles
CVE-2026-91216Oracle Corporation Oracle SOA Suite vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS2articles
CVE-2026-87337Oracle Corporation Oracle Access Manager vulnerabilityCVSS10.0Critical–Not in KEV0.4%EPSS2articles
CVE-2026-91323Oracle Corporation Oracle WebLogic Server vulnerabilityCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-83399Oracle Corporation Oracle WebLogic Server vulnerabilityCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-91299Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS1article
CVE-2026-70774Oracle Corporation Oracle Warehouse Management vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
CVE-2026-60702Oracle Corporation Oracle WebLogic Server vulnerabilityCVSS9.9Critical–Not in KEV0.4%EPSS1article
CVE-2026-60206Oracle Corporation Oracle WebLogic Server vulnerabilityCVSS9.9Critical–Not in KEV0.4%EPSS1article
CVE-2026-8863Oracle Corporation OracleLinux(7.2) shim vulnerabilityCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-46840Oracle Corporation Oracle REST Data Services vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS1article
CVE-2026-46833Oracle Corporation Oracle Database Server vulnerabilityCVSS9.0Critical–Not in KEV0.4%EPSS1article
CVE-2026-21992Oracle Corporation Oracle Identity Manager vulnerabilityCVSS9.8Critical–Not in KEV1.0%EPSS5articles

Coverage

78 articles, all timeFull timeline RSS feed
  1. Oracle Rushes Fix for Compromised Certificates Threatening Java UsersSecurityOnline
  2. Oracle fixes 1,209 vulnerabilities in October security updateSecurityWeek
  3. Oracle Fixes Critical MySQL Flaws That Could Allow System TakeoverSecurityOnline
  4. Oracle Patches Critical E-Business Suite Flaw That Could Enable TakeoverSecurityOnline
  5. Oracle Patches 203 Fusion Middleware Flaws, Including Four Critical BugsSecurityOnline
  6. eMudhra Revokes Eight CAs After Private Keys Were Created One Byte LongSANS ISC
  7. Oracle’s October Patch Fixes 1,209 CVEs, Including Six Critical FlawsSecurityOnline
  8. A Warehouse WMS Breach Could Disrupt Every Stage of Order FulfilmentSecurelist
  9. Teen ShinyHunters Member Detained During Boeing Unit Extortion AttemptKrebs on Security
  10. FBI removes Accenture contractor after ShinyHunters breach exposes staff dataThe Hacker News
  11. Dutch Police Arrest Suspected ShinyHunters Member in Ongoing ProbeSecurityWeek
  12. Dutch Police Arrest Suspected ShinyHunters Member in AmsterdamThe Hacker News
  13. Dutch Police Arrest Suspected ShinyHunters Hacker After Major BreachesKrebs on Security
  14. ShinyHunters Revive Attacks on PeopleSoft with WAF BypassSecurityWeek
  15. ShinyHunters Expands Global Oracle PeopleSoft Exploitation CampaignGoogle Cloud
  16. ShinyHunters Claims FBI Applicant Data Breach via Oracle FlawSecurity Affairs
  17. ShinyHunters Claims FBI Breach Exposed Agents’ Personal DataSecurityWeek
  18. ShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands BitcoinDark Reading
  19. ShinyHunters Hijacks Clop Leak Site and Threatens to Expose SecretsSOCRadar
  20. ShinyHunters Claims It Hacked and Extorted Clop Ransomware GroupInfosecurity
  21. ShinyHunters Claims It Breached and Defaced Clop’s Leak SiteDataBreaches
  22. Weekly CVE Report: 11 Exploited Flaws Added to KEVSecurityOnline
  23. CISA flags Oracle flaw CVE-2026-21962, orders patch by Aug 27Security Affairs
  24. Clop uses Oracle CVE-2026-21962 to hit PTC Windchill credentialsSecurityOnline
  25. CISA urges patch of critical Oracle WebLogic flaw CVE-2026-21962SecurityWeek
  26. Oracle Flaw CVE-2026-21962 Lets Attackers Access Critical DataSecurityOnline
  27. CISA Adds Oracle HTTP Server Flaw CVE-2026-21962 to KEV CatalogCISA · official notice
  28. CISA warns of critical Oracle HTTP Server flaw, urges patchCISA · official notice
  29. Critical WebLogic Flaw CVE-2026-60702 Enables Full Server TakeoverSecurityOnline
  30. Oracle WebLogic Flaw CVE-2026-60206 Allows Remote Server TakeoverSecurityOnline
  31. U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
  32. ESET warns outdated Microsoft UEFI shims can bypass Secure BootSecurityWeek
  33. CISA flags Oracle E‑Business Suite flaw CVE‑2026‑46817 in KEVCISA · official notice
  34. CISA Adds CVE-2026-46817 to Known Exploited Vulnerabilities CatalogueCISA · official notice
  35. Oracle EBS flaw CVE-2026-46817 under attack, 950 systems exposedSecurity Affairs
  36. Exploitation of Recent Oracle E-Business Suite Vulnerability BeginsSecurityWeek
  37. Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817Security Affairs
  38. Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildThe Hacker News
  39. Oracle PeopleSoft flaw lets attackers bypass auth, CVE-2026-35273SecurityOnline
  40. Codex Rate Limit Reset: OpenAI Introduces Flexible LimitsSecurityOnline
  41. CVE-2026-35273 flaw lets attackers wipe Wazuh logs via PeopleSoftSecurityOnline
  42. UEFI shim bug CVE-2026-35273 enables Secure Boot bypassSecurityOnline
  43. CISA warns of Oracle PeopleSoft zero day exploit CVE-2026-35273Security Affairs
  44. CISA Adds Oracle PeopleSoft Flaw CVE-2026-35273 to KEV CatalogCISA · official notice
  45. ShinyHunters Uses Oracle Zero-Day to Rampage Higher EdDark Reading
  46. CISA Flags CVE-2026-35273 in PeopleSoft, Orders Patch by June 15CISA · official notice
  47. ShinyHunters exploit PeopleSoft flaw CVE-2026-35273, hit 100 unisArs Technica
  48. CISA flags Oracle PeopleSoft bug CVE-2026-35273 in KEV catalogCISA · official notice
  49. ShinyHunters Exploits Oracle PeopleSoft Flaw Leaks Data WorldwideDataBreaches
  50. Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)Rapid7

The latest 50 are listed. Every article is in the RSS feed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device