Oracle: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 19 entries in Oracle that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | Ransomware | |
| CVE-2025-61757 | Oracle Fusion Middleware | ||
| CVE-2025-61884 | Oracle E-Business Suite | Ransomware | |
| CVE-2025-61882 | Oracle E-Business Suite | Ransomware | |
| CVE-2020-2883 | Oracle WebLogic Server | ||
| CVE-2020-14644 | Oracle WebLogic Server | ||
| CVE-2017-3506 | Oracle WebLogic Server | ||
| CVE-2020-2551 | Oracle Fusion Middleware | ||
| CVE-2023-21839 | Oracle WebLogic Server | ||
| CVE-2022-21587 | Oracle E-Business Suite | Ransomware | |
| CVE-2021-35587 | Oracle Fusion Middleware | ||
| CVE-2018-2628 | Oracle WebLogic Server | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | ||
| CVE-2017-10271 | Oracle WebLogic Server | Ransomware | |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | ||
| CVE-2019-2725 | Oracle WebLogic Server | Ransomware | |
| CVE-2020-14883 | Oracle WebLogic Server | ||
| CVE-2020-14882 | Oracle WebLogic Server | ||
| CVE-2020-14750 | Oracle WebLogic Server |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.