Oracle CVEs
9,094 CVEs and advisories name Oracle as an affected vendor, 28 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21516Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Service Requests).
- CVE-2025-21515Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21514Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21513Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21512Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21511Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21510Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21509Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21508Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21507Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).
- CVE-2025-21506Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Technology Foundation).
- CVE-2025-21505Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).
- CVE-2025-21504Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2025-21503Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
- CVE-2025-21502Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot
- CVE-2025-21501Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2025-21500Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2025-21499Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).
- CVE-2025-21498Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).
- CVE-2025-21497Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
- CVE-2025-21495Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall).
- CVE-2025-21494Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
- CVE-2025-21493Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
- CVE-2025-21492Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
- CVE-2025-21491Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
- CVE-2025-21490Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
- CVE-2025-21489Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping).
- CVE-2024-21245Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC).
- CVE-2019-2483Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).
- CVE-2022-21505In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine whe