Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2019-2725 | Oracle Agile Product Lifecycle Management | 9.8critical | 2022-01-10 | 2022-07-10 | ransomware |
| CVE-2026-21962 | Oracle Http Server | 10.0critical | 2026-08-24 | 2026-08-27 | |
| CVE-2017-10271 | Oracle Weblogic Server | 7.5high | 2022-02-10 | 2022-08-10 | ransomware |
| CVE-2013-0431 | Oracle Jre | 5.3medium | 2022-05-25 | 2022-06-15 | ransomware |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | ransomware | |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 2025-11-10 | ransomware | |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 2025-10-27 | ransomware | |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 2023-02-23 | ransomware | |
| CVE-2013-2465 | Oracle Java SE | 2022-03-28 | 2022-04-18 | ransomware | |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 | ransomware | |
| CVE-2012-4681 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ransomware | |
| CVE-2012-1723 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ransomware | |
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 2022-06-15 | ransomware | |
| CVE-2026-46859 | Oracle Agile Product Lifecycle Management | 9.8critical | — | — | |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 2026-07-18 | ||
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 2025-12-12 | ||
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 2024-12-12 | ||
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 2026-06-04 | ||
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 2025-03-17 | ||
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | 2023-05-22 | ||
| CVE-2022-21445 | Oracle ADF Faces | 2024-09-18 | 2024-10-09 | ||
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 2022-12-19 | ||
| CVE-2020-2883 | Oracle WebLogic Server | 2025-01-07 | 2025-01-28 | ||
| CVE-2020-2555 | Oracle Multiple Products | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-2551 | Oracle Fusion Middleware | 2023-11-16 | 2023-12-07 |
Page 1 of 3 · 51 entriesNext