Oracle CVEs
9,094 CVEs and advisories name Oracle as an affected vendor, 28 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-21969Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal).
- CVE-2026-21968Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21967Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet).
- CVE-2026-21966Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).
- CVE-2026-21965Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).
- CVE-2026-21964Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).
- CVE-2026-21963Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21962Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Serve
- CVE-2026-21961Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer, Empl
- CVE-2026-21960Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils).
- CVE-2026-21959Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader).
- CVE-2026-21957Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21956Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21955Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).
- CVE-2026-21952Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).
- CVE-2026-21951Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).
- CVE-2026-21950Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21949Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21948Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21947Vulnerability in Oracle Java SE (component: JavaFX).
- CVE-2026-21946Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2026-21945Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit
- CVE-2026-21944Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
- CVE-2026-21943Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin).
- CVE-2026-21942Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).
- CVE-2026-21941Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2026-21940Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group).
- CVE-2026-21939Vulnerability in the SQLcl component of Oracle Database Server.
- CVE-2026-21938Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).
- CVE-2026-21937Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).