Vulnerabilità per vendor · aggiornato a ogni pubblicazione
Vulnerabilità Oracle: CVE sfruttate e nostre analisi
Oracle ha 46 vulnerabilità nel catalogo CISA Known Exploited Vulnerabilities, 5 delle quali aggiunte negli ultimi 12 mesi e 13 note per l'uso in campagne ransomware. Qui sotto: le 2 analisi pubblicate da Zero Hunt Research sui prodotti Oracle, poi le voci del catalogo dalla più recente, con la scadenza federale.
Catalogo CISA versione 2026.10.21, pubblicato il 2026-10-21 14:04 UTC.
46
CVE in CISA KEV
5
Aggiunte negli ultimi 12 mesi
13
Uso noto nel ransomware
2
Analisi Zero Hunt
Prodotti con più voci nel KEV: WebLogic Server (12) · Java SE (7) · Fusion Middleware (6) · E-Business Suite (4) · Java Runtime Environment (JRE) (4) · Agile Product Lifecycle Management (PLM) (2)
Le nostre analisi delle vulnerabilità Oracle
2026-07-01
Oracle E-Business Suite CVE-2026-46817: la lettura file non autenticata dentro PaymentsCVE-2026-46817 è una falla di autenticazione mancante CVSS 9.8 in Oracle E-Business Suite Payments, sfruttata in the wild sei settimane dopo la patch e prima di ogni PoC pubblico.
2026-06-12
Zero-day Oracle PeopleSoft CVE-2026-35273: ShinyHunters era già uscito prima dell'avvisoShinyHunters ha sfruttato uno zero-day PeopleSoft con CVSS 9.8 (CVE-2026-35273) contro 100+ organizzazioni — 68% università — e a notificarle è stata Google. Il problema è la prova.
Le ultime 40 di 46 voci KEV
| Aggiunta | CVE | Prodotto e vulnerabilità | Scadenza federale | Segnalazioni | Nostra analisi |
|---|---|---|---|---|---|
| 2026-08-24 | CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauth… | 2026-08-27 | Triage forense | — |
| 2026-07-15 | CVE-2026-46817 | E-Business Suite Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerabil… | 2026-07-18 | Triage forense | Leggi → |
| 2026-06-12 | CVE-2026-35273 | PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools. | 2026-06-15 | Ransomware | Leggi → |
| 2026-06-01 | CVE-2024-21182 | WebLogic Server Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can re… | 2026-06-04 | — | |
| 2025-11-21 | CVE-2025-61757 | Fusion Middleware Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager. | 2025-12-12 | — | |
| 2025-10-20 | CVE-2025-61884 | E-Business Suite Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication. | 2025-11-10 | Ransomware | — |
| 2025-10-06 | CVE-2025-61882 | E-Business Suite Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent P… | 2025-10-27 | Ransomware | — |
| 2025-02-24 | CVE-2024-20953 | Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. | 2025-03-17 | — | |
| 2025-01-07 | CVE-2020-2883 | WebLogic Server Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3. | 2025-01-28 | — | |
| 2024-11-21 | CVE-2024-21287 | Agile Product Lifecycle Management (PLM) Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may r… | 2024-12-12 | — | |
| 2024-09-18 | CVE-2022-21445 | ADF Faces Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution. | 2024-10-09 | — | |
| 2024-09-18 | CVE-2020-14644 | WebLogic Server Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve re… | 2024-10-09 | — | |
| 2024-06-03 | CVE-2017-3506 | WebLogic Server Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes… | 2024-06-24 | — | |
| 2023-11-16 | CVE-2020-2551 | Fusion Middleware Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server. | 2023-12-07 | — | |
| 2023-05-12 | CVE-2016-3427 | Java SE and JRockit Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulner… | 2023-06-02 | — | |
| 2023-05-01 | CVE-2023-21839 | WebLogic Server Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server. | 2023-05-22 | — | |
| 2023-02-02 | CVE-2022-21587 | E-Business Suite Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. | 2023-02-23 | Ransomware | — |
| 2022-11-28 | CVE-2021-35587 | Fusion Middleware Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product. | 2022-12-19 | — | |
| 2022-09-08 | CVE-2018-2628 | WebLogic Server Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server. | 2022-09-29 | — | |
| 2022-05-25 | CVE-2019-3010 | Solaris Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation. | 2022-06-15 | — | |
| 2022-05-25 | CVE-2013-2423 | Java Runtime Environment (JRE) Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity. | 2022-06-15 | — | |
| 2022-05-25 | CVE-2013-0431 | Java Runtime Environment (JRE) Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox. | 2022-06-15 | Ransomware | — |
| 2022-05-25 | CVE-2013-0422 | Java Runtime Environment (JRE) A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system. | 2022-06-15 | Ransomware | — |
| 2022-05-25 | CVE-2012-1710 | Fusion Middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to D… | 2022-06-15 | Ransomware | — |
| 2022-05-25 | CVE-2010-0840 | Java Runtime Environment (JRE) Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors. | 2022-06-15 | — | |
| 2022-03-28 | CVE-2013-2465 | Java SE Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D | 2022-04-18 | Ransomware | — |
| 2022-03-28 | CVE-2012-5076 | Java SE The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws… | 2022-04-18 | — | |
| 2022-03-28 | CVE-2012-0518 | Fusion Middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors | 2022-04-18 | — | |
| 2022-03-25 | CVE-2019-2616 | BI Publisher (Formerly XML Publisher) Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass. | 2022-04-15 | — | |
| 2022-03-03 | CVE-2015-4902 | Java SE Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. | 2022-03-24 | — | |
| 2022-03-03 | CVE-2015-2590 | Java SE An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. | 2022-03-24 | — | |
| 2022-03-03 | CVE-2012-4681 | Java SE The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. | 2022-03-24 | Ransomware | — |
| 2022-03-03 | CVE-2012-1723 | Java SE Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot. | 2022-03-24 | Ransomware | — |
| 2022-03-03 | CVE-2012-0507 | Java SE An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. | 2022-03-24 | Ransomware | — |
| 2022-03-03 | CVE-2011-3544 | Java SE JDK and JRE An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. | 2022-03-24 | — | |
| 2022-03-03 | CVE-2008-3431 | VirtualBox An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code. | 2022-03-24 | — | |
| 2022-02-10 | CVE-2017-10271 | WebLogic Server Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. | 2022-08-10 | Ransomware | — |
| 2022-01-18 | CVE-2020-14864 | Intelligence Enterprise Edition Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file. | 2022-07-18 | — | |
| 2022-01-10 | CVE-2019-2725 | WebLogic Server Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). | 2022-07-10 | Ransomware | — |
| 2021-11-03 | CVE-2020-2555 | Multiple Products Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coher… | 2022-05-03 | — |
Fonte: catalogo CISA Known Exploited Vulnerabilities (dati pubblici). Le descrizioni sono di CISA, abbreviate. Verifica sempre l'advisory del vendor prima di intervenire. cisa.gov
Prima della patch: tre verifiche
- 01Confronta la versione e la configurazione esatte che usi con l'advisory del vendor. Avere il prodotto non significa essere esposti.
- 02Verifica la raggiungibilità: una falla sfruttata su un'interfaccia raggiungibile da internet, o da una postazione compromessa, passa in testa alla coda.
- 03Dove CISA indica il triage forense, oltre alla patch cerca tracce di compromissione: la correzione non elimina un attaccante entrato prima.
Domande
Quante vulnerabilità Oracle ci sono nel catalogo CISA KEV?
46 nella versione 2026.10.21 del catalogo, la prima aggiunta il 2021-11-03 e la più recente il 2026-08-24. 5 sono state aggiunte negli ultimi 12 mesi.
Quali prodotti Oracle hanno più vulnerabilità sfruttate?
Per numero di voci KEV: WebLogic Server (12), Java SE (7), Fusion Middleware (6), E-Business Suite (4), Java Runtime Environment (JRE) (4), Agile Product Lifecycle Management (PLM) (2).
Le vulnerabilità Oracle sono usate negli attacchi ransomware?
CISA indica 13 delle 46 voci Oracle come note per l'uso in campagne ransomware. Nella tabella sono segnalate.
La prossima CVE Oracle è sfruttabile nella tua rete?
Una voce KEV dice che una vulnerabilità è sfruttata da qualche parte. Zero Hunt risponde se è sfruttabile nel tuo ambiente: un red team AI autonomo su un'appliance on-premise, con AI privata, in black box o gray box e con una persona che approva ogni passo che conta.
Altri vendor: Cisco · Microsoft · Fortinet · Linux kernel · Citrix · GitLab · Adobe · Palo Alto Networks · Check Point · Langflow · Arista · SonicWall · Ivanti · VMware · Zimbra · SAP · Atlassian · Zyxel · Progress · F5