Is Oracle safe right now?

Exploited recently

No new exploited flaws in the last 30 days, but 1 in the last 90. Make sure those updates are installed.

0exploited in the last 30 days

1in the last 90 days

1zero-days in 2026

46on CISA's list, all time

Check your version Email me when Oracle is attacked

Exploited in the last 90 days

HTTP Server and Oracle Weblogic Server Proxy Plug-in
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
CVE-2026-21962 · listed Aug 24, 2026 · CISA deadline Aug 27, 2026

Earlier exploited flaws

Jul 15, 2026 Oracle E-Business Suite Improper Privilege Management Vulnerability
Jun 12, 2026 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Zero-day
Jun 1, 2026 Oracle WebLogic Server Unspecified Vulnerability
Nov 21, 2025 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Oct 20, 2025 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Oct 6, 2025 Oracle E-Business Suite Unspecified Vulnerability Zero-day
Feb 24, 2025 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
Jan 7, 2025 Oracle WebLogic Server Unspecified Vulnerability
Nov 21, 2024 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Zero-day
Sep 18, 2024 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
Sep 18, 2024 Oracle WebLogic Server Remote Code Execution Vulnerability
Jun 3, 2024 Oracle WebLogic Server OS Command Injection Vulnerability
Nov 16, 2023 Oracle Fusion Middleware Unspecified Vulnerability
May 12, 2023 Oracle Java SE and JRockit Unspecified Vulnerability
May 1, 2023 Oracle WebLogic Server Unspecified Vulnerability

By year

Year	Exploited flaws added	Zero-days
2026 (so far)	4	1
2025	5	1
2024	4	1
2023	4	0
2022	22	0

Questions

Is Oracle safe right now?

No new exploited flaws in the last 30 days, but 1 in the last 90. Make sure those updates are installed. Confirm with the vendor's own advisories and install updates as soon as they're available.

How many Oracle vulnerabilities have been exploited?

46 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 13 of them used by ransomware.

Covers products matching oracle, weblogic, e-business. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.