Oracle
Number 3 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
9,114
Critical
784
High
2,835
Known Exploited
46
Exploit available
40
Visible in Bangladesh
1,805
Services seen by internet scanning
Network, no login needed
36.1%
Of 6,981 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 4,155 | 658 | 2,082 | 1,209 | 206 | 0 |
| 2025 | 313 | 11 | 58 | 223 | 21 | 0 |
| 2024 | 371 | 8 | 84 | 230 | 49 | 0 |
| 2023 | 295 | 6 | 55 | 204 | 30 | 0 |
| 2022 | 416 | 15 | 70 | 291 | 40 | 0 |
| 2021 | 586 | 34 | 222 | 290 | 40 | 0 |
| 2020 | 811 | 36 | 256 | 456 | 63 | 0 |
| 2019 | 611 | 2 | 3 | 1 | 1 | 604 |
| 2018 | 693 | 1 | 2 | 3 | 1 | 686 |
| 2017 | 845 | 0 | 2 | 0 | 0 | 843 |
| 2016 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2015 | 3 | 2 | 0 | 1 | 0 | 0 |
| 2014 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2013 | 4 | 2 | 0 | 0 | 2 | 0 |
| 2012 | 7 | 6 | 0 | 1 | 0 | 0 |
| 2011 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2010 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2009 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2008 | 1 | 0 | 1 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| MySQL Server | 1,114 | 30 |
| VM VirtualBox | 284 | 75 |
| PeopleSoft Enterprise PT PeopleTools | 192 | 18 |
| WebLogic Server | 192 | 85 |
| Java | 179 | 9 |
| Oracle Hyperion Financial Management | 159 | 115 |
| JD Edwards EnterpriseOne Tools | 158 | 66 |
| Oracle VM VirtualBox | 144 | 58 |
| Solaris Operating System | 139 | 19 |
| Outside In Technology | 137 | 31 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Improper Access Control | 2,653 | 1,788 |
| Authentication Issues | 581 | 535 |
| Information Disclosure | 421 | 114 |
| Denial of Service | 320 | 83 |
| Privilege Escalation | 281 | 241 |
| Incorrect Authorization | 84 | 32 |
| Cross-Site Request Forgery | 64 | 21 |
| URL Redirection to Untrusted Site ('Open Redirect') | 35 | 16 |
| Allocation of Resources Without Limits or Throttling | 33 | 1 |
| Cross-Site Scripting | 30 | 12 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools: Authentication Issues | Critical | 96.7% | |
| CVE-2026-46817 | Oracle Payments: Authentication Issues | Critical | 12.3% | |
| CVE-2026-21962 | Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in: Improper Access Control | Critical | 73.2% | |
| CVE-2025-61757 | Oracle Identity Manager: Authentication Issues | Critical | 88.6% | |
| CVE-2025-61884 | Oracle Configurator: Server-Side Request Forgery | High | 95.9% | |
| CVE-2025-61882 | Oracle Concurrent Processing: Authentication Issues | Critical | 99.7% | |
| CVE-2024-21287 | Oracle Agile PLM Framework: Incorrect Authorization | High | 1.7% | |
| CVE-2024-21182 | Oracle WebLogic Server vulnerability | High | 74.2% | |
| CVE-2024-20953 | Oracle Agile PLM Framework: Insecure Deserialization | High | 3.9% | |
| CVE-2023-21839 | Oracle WebLogic Server: Authentication Issues | High | 99.9% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-114820 | Oracle Java SE vulnerability | Critical | 0.3% | |
| CVE-2026-91403 | Oracle Java SE vulnerability | Critical | 0.4% | |
| CVE-2026-91668 | Oracle Data Integrator: Privilege Escalation | High | 0.3% | |
| CVE-2026-91665 | Oracle Essbase: Authentication Issues | Critical | 0.5% | |
| CVE-2026-91664 | Oracle Essbase: Denial of Service | High | 0.3% | |
| CVE-2026-91663 | Oracle Essbase: Improper Access Control | Critical | 0.3% | |
| CVE-2026-91662 | Oracle Essbase: Improper Access Control | Medium | 0.1% | |
| CVE-2026-91661 | Oracle Essbase: Information Disclosure | High | 0.3% | |
| CVE-2026-91660 | Oracle Essbase: Denial of Service | Medium | 0.3% | |
| CVE-2026-91659 | Oracle Essbase: Improper Access Control | High | 0.2% |