Oracle CVEs
9,094 CVEs and advisories name Oracle as an affected vendor, 28 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-22003Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
- CVE-2026-22002Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-22001Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).
- CVE-2026-21999Vulnerability in the XML Database component of Oracle Database Server.
- CVE-2026-21998Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21997Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).
- CVE-2026-21992Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manag
- CVE-2026-21994Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component:
- CVE-2026-21991A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.
- CVE-2026-21990Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21989Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21988Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21987Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21986Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21985Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21984Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21983Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21982Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21981Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21980Vulnerability in the Oracle Life Sciences Central Coding product of Oracle Health Sciences Applications (component: Platform).
- CVE-2026-21979Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent).
- CVE-2026-21978Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing).
- CVE-2026-21977Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance (component: Secur
- CVE-2026-21976Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud).
- CVE-2026-21975Vulnerability in the Java VM component of Oracle Database Server.
- CVE-2026-21974Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform).
- CVE-2026-21973Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management Sy
- CVE-2026-21972Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface).
- CVE-2026-21971Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).
- CVE-2026-21970Vulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences Applications (component: Platform).