Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-14883 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-14882 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 2022-07-18 | ||
| CVE-2020-14750 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-14644 | Oracle WebLogic Server | 2024-09-18 | 2024-10-09 | ||
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 2022-06-15 | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 2022-04-15 | ||
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 2022-09-29 | ||
| CVE-2017-3506 | Oracle WebLogic Server | 2024-06-03 | 2024-06-24 | ||
| CVE-2016-3427 | Oracle Java SE and JRockit | 2023-05-12 | 2023-06-02 | ||
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | ||
| CVE-2012-5076 | Oracle Java SE | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 2022-05-03 | ||
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 2022-04-18 | ||
| CVE-2011-3544 | Oracle Java SE JDK and JRE | 2022-03-03 | 2022-03-24 | ||
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | ||
| CVE-2008-3431 | Oracle VirtualBox | 2022-03-03 | 2022-03-24 | ||
| CVE-2021-2351 | Oracle Advanced Networking Option | 8.3high | — | — | |
| CVE-2017-10039 | Oracle Agile Product Lifecycle Management | 6.8medium | — | — | |
| CVE-2022-21467 | Oracle Agile Product Lifecycle Management | 6.5medium | — | — | |
| CVE-2023-22039 | Oracle Agile Product Lifecycle Management | 5.4medium | — | — |