Email, files and business apps

Oracle security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 46 actively exploited security flaws for Oracle, dated Nov 3, 2021 to Aug 24, 2026. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Oracle? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Oracle products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Aug 24, 2026Exploited flaw

   Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (CVE-2026-21962). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Jul 15, 2026Exploited flaw

   Oracle E-Business Suite Improper Privilege Management Vulnerability (CVE-2026-46817). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Jun 12, 2026Exploited flaw

   Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability (CVE-2026-35273). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Jun 1, 2026Exploited flaw

   Oracle WebLogic Server Unspecified Vulnerability (CVE-2024-21182). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Nov 21, 2025Exploited flaw

   Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability (CVE-2025-61757). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Oct 20, 2025Exploited flaw

   Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-61884). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Oct 6, 2025Exploited flaw

   Oracle E-Business Suite Unspecified Vulnerability (CVE-2025-61882). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Feb 24, 2025Exploited flaw

   Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability (CVE-2024-20953). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Jan 7, 2025Exploited flaw

   Oracle WebLogic Server Unspecified Vulnerability (CVE-2020-2883). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Nov 21, 2024Exploited flaw

    Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability (CVE-2024-21287). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Sep 18, 2024Exploited flaw

    Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14644). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Sep 18, 2024Exploited flaw

    Oracle ADF Faces Deserialization of Untrusted Data Vulnerability (CVE-2022-21445). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Jun 3, 2024Exploited flaw

    Oracle WebLogic Server OS Command Injection Vulnerability (CVE-2017-3506). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Nov 16, 2023Exploited flaw

    Oracle Fusion Middleware Unspecified Vulnerability (CVE-2020-2551). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

15. May 12, 2023Exploited flaw

    Oracle Java SE and JRockit Unspecified Vulnerability (CVE-2016-3427). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. May 1, 2023Exploited flaw

    Oracle WebLogic Server Unspecified Vulnerability (CVE-2023-21839). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Feb 2, 2023Exploited flaw

    Oracle E-Business Suite Unspecified Vulnerability (CVE-2022-21587). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Nov 28, 2022Exploited flaw

    Oracle Fusion Middleware Unspecified Vulnerability (CVE-2021-35587). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Sep 8, 2022Exploited flaw

    Oracle WebLogic Server Unspecified Vulnerability (CVE-2018-2628). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. May 25, 2022Exploited flaw

    Oracle JRE Unspecified Vulnerability (CVE-2010-0840). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

21. May 25, 2022Exploited flaw

    Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-1710). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

22. May 25, 2022Exploited flaw

    Oracle JRE Remote Code Execution Vulnerability (CVE-2013-0422). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

23. May 25, 2022Exploited flaw

    Oracle JRE Sandbox Bypass Vulnerability (CVE-2013-0431). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

24. May 25, 2022Exploited flaw

    Oracle JRE Unspecified Vulnerability (CVE-2013-2423). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

25. May 25, 2022Exploited flaw

    Oracle Solaris Privilege Escalation Vulnerability (CVE-2019-3010). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

26. Mar 28, 2022Exploited flaw

    Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-0518). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

27. Mar 28, 2022Exploited flaw

    Oracle Java SE Sandbox Bypass Vulnerability (CVE-2012-5076). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

28. Mar 28, 2022Exploited flaw

    Oracle Java SE Unspecified Vulnerability (CVE-2013-2465). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

29. Mar 25, 2022Exploited flaw

    Oracle BI Publisher Unauthorized Access Vulnerability (CVE-2019-2616). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

30. Mar 3, 2022Exploited flaw

    Oracle VirtualBox Insufficient Input Validation Vulnerability (CVE-2008-3431). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

31. Mar 3, 2022Exploited flaw

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (CVE-2011-3544). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

32. Mar 3, 2022Exploited flaw

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (CVE-2012-0507). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

33. Mar 3, 2022Exploited flaw

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (CVE-2012-1723). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

34. Mar 3, 2022Exploited flaw

    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (CVE-2012-4681). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

35. Mar 3, 2022Exploited flaw

    Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability (CVE-2015-2590). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

36. Mar 3, 2022Exploited flaw

    Oracle Java SE Integrity Check Vulnerability (CVE-2015-4902). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

37. Feb 10, 2022Exploited flaw

    Oracle Corporation WebLogic Server Remote Code Execution Vulnerability (CVE-2017-10271). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

38. Jan 18, 2022Exploited flaw

    Oracle Business Intelligence Enterprise Edition Path Transversal (CVE-2020-14864). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

39. Jan 10, 2022Exploited flaw

    Oracle WebLogic Server, Injection (CVE-2019-2725). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

40. Nov 3, 2021Exploited flaw

    Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-3152). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

41. Nov 3, 2021Exploited flaw

    Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability (CVE-2015-4852). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

42. Nov 3, 2021Exploited flaw

    Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14750). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

43. Nov 3, 2021Exploited flaw

    Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability (CVE-2020-14871). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

44. Nov 3, 2021Exploited flaw

    Oracle WebLogic Server Remote Code Execution Vulnerability (CVE-2020-14882). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

45. Nov 3, 2021Exploited flaw

    Oracle WebLogic Server Unspecified Vulnerability (CVE-2020-14883). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

46. Nov 3, 2021Exploited flaw

    Oracle Multiple Products Remote Code Execution Vulnerability (CVE-2020-2555). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Oracle security incident history," vendorhistory.com/vendor/oracle, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.