CVE Tools
Track your stack

Oracle

12,857 CVEs across 237 months on the top 200 list since Sep 1999. Peak rank #1 in 53 months, last Jul 2026. 68 of them are now in CISA KEV.

Oracle CVEs per month since Sep 1999

Dec 2021 to Nov 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 1,108, Jul 2026
Dec 2021: 20 CVEs · 2 critical · 0 now in CISA KEV · rank #32 · mostly HTTP Server, Zfs Storage Appliance Kit, Communications Cloud Native Core PolicyJan 2022: 186 CVEs · 15 critical · 2 now in CISA KEV · rank #1 · mostly MySQL, MySQL Cluster, MySQL ServerFeb 2022: 22 CVEs · 5 critical · 0 now in CISA KEV · rank #39 · mostly Zfs Storage Appliance Kit, HTTP Server, Communications Cloud Native Core Binding Support FunctionMar 2022: 26 CVEs · 5 critical · 1 now in CISA KEV · rank #27 · mostly Communications Cloud Native Core Binding Support Function, Communications Cloud Native Core Network Exposure Function, Communications Cloud Native Core PolicyApr 2022: 98 CVEs · 5 critical · 3 now in CISA KEV · rank #8 · mostly MySQL Server, MySQL, Weblogic ServerMay 2022: 13 CVEs · 1 critical · 0 now in CISA KEV · rank #57 · mostly Financial Services Crime and Compliance Management Studio, Oracle Financial Services Crime and Compliance Management Studio, Primavera UnifierJun 2022: 9 CVEs · 0 critical · 0 now in CISA KEV · rank #76 · mostly Linux, HTTP Server, Oracle LinuxJul 2022: 96 CVEs · 3 critical · 0 now in CISA KEV · rank #7 · mostly MySQL Server, Database, Security ServiceAug 2022: below the top 200 that month, 3 or fewer CVEsSep 2022: below the top 200 that month, 3 or fewer CVEsOct 2022: 81 CVEs · 2 critical · 1 now in CISA KEV · rank #5 · mostly MySQL, MySQL Server, Vm VirtualBoxNov 2022: 22 CVEs · 0 critical · 0 now in CISA KEV · rank #35 · mostly Oracle Exadata, Oracle Vm Server For X86, Restaurant Menu - Food Ordering System - Table ReservationDec 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #108 · mostly Solaris, Jd Edwards Enterpriseone Orchestrator, Jd Edwards Enterpriseone ToolsJan 2023: 82 CVEs · 1 critical · 2 now in CISA KEV · rank #6 · mostly MySQL Server, E-business Suite, MySQLFeb 2023: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #77 · mostly Oracle Exadata, Database, Communications Cloud Native Core Network Exposure FunctionMar 2023: no snapshot, the run for this month failedApr 2023: 92 CVEs · 0 critical · 0 now in CISA KEV · rank #6 · mostly MySQL Server, Vm VirtualBox, Graalvm Enterprise EditionMay 2023: below the top 200 that month, 3 or fewer CVEsJun 2023: below the top 200 that month, 4 or fewer CVEsJul 2023: 57 CVEs · 2 critical · 0 now in CISA KEV · rank #14 · mostly MySQL Server, Oracle Graalvm For Jdk, GraalvmAug 2023: below the top 200 that month, 4 or fewer CVEsSep 2023: 4 CVEs · 0 critical · 1 now in CISA KEV · rank #163 · mostly Oracle Linux, Oracle Vm, Vm ServerOct 2023: 75 CVEs · 3 critical · 0 now in CISA KEV · rank #10 · mostly MySQL, MySQL Server, Weblogic ServerNov 2023: below the top 200 that month, 4 or fewer CVEsDec 2023: below the top 200 that month, 4 or fewer CVEsJan 2024: 43 CVEs · 0 critical · 0 now in CISA KEV · rank #20 · mostly MySQL Server, MySQL, E-business SuiteFeb 2024: 47 CVEs · 0 critical · 1 now in CISA KEV · rank #20 · mostly MySQL Server, E-business Suite, Graalvm Enterprise EditionMar 2024: below the top 200 that month, 4 or fewer CVEsApr 2024: 135 CVEs · 5 critical · 0 now in CISA KEV · rank #8 · mostly E-business Suite, Complex Maintenance Repair and Overhaul, Oracle Complex Maintenance, Repair, and OverhaulMay 2024: below the top 200 that month, 5 or fewer CVEsJun 2024: below the top 200 that month, 4 or fewer CVEsJul 2024: 63 CVEs · 1 critical · 1 now in CISA KEV · rank #16 · mostly MySQL Server, MySQL, E-business SuiteAug 2024: below the top 200 that month, 4 or fewer CVEsSep 2024: below the top 200 that month, 3 or fewer CVEsOct 2024: 88 CVEs · 2 critical · 0 now in CISA KEV · rank #12 · mostly MySQL, MySQL Server, E-business SuiteNov 2024: 6 CVEs · 0 critical · 1 now in CISA KEV · rank #154 · mostly Oracle Exadata, Agile Product Lifecycle Management, Restaurant Menu - Food Ordering System - Table ReservationDec 2024: 8 CVEs · 0 critical · 1 now in CISA KEV · rank #83 · mostly Oracle Exadata, Linux, Oracle LinuxJan 2025: 88 CVEs · 4 critical · 0 now in CISA KEV · rank #13 · mostly MySQL Server, Jd Edwards Enterpriseone Tools, Oracle Agile Plm FrameworkFeb 2025: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #47 · mostly Oracle Exadata, Java SeMar 2025: below the top 200 that month, 5 or fewer CVEsApr 2025: 73 CVEs · 1 critical · 0 now in CISA KEV · rank #13 · mostly MySQL Server, MySQL Cluster, E-business SuiteMay 2025: below the top 200 that month, 4 or fewer CVEsJun 2025: below the top 200 that month, 4 or fewer CVEsJul 2025: 85 CVEs · 1 critical · 0 now in CISA KEV · rank #17 · mostly MySQL Server, MySQL, E-business SuiteAug 2025: below the top 200 that month, 4 or fewer CVEsSep 2025: below the top 200 that month, 4 or fewer CVEsOct 2025: 78 CVEs · 5 critical · 3 now in CISA KEV · rank #10 · mostly MySQL Server, Oracle Vm VirtualBox, Zfs Storage Appliance KitNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: below the top 200 that month, 5 or fewer CVEsJan 2026: 66 CVEs · 2 critical · 0 now in CISA KEV · rank #10 · mostly Vm VirtualBox, Oracle Vm VirtualBox, MySQL ServerFeb 2026: below the top 200 that month, 5 or fewer CVEsMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: 102 CVEs · 5 critical · 0 now in CISA KEV · rank #6 · mostly MySQL Server, Jdk, Oracle Java SeMay 2026: 32 CVEs · 9 critical · 0 now in CISA KEV · rank #39 · mostly Rest Data Services, Oracle Rest Data Services, E-business SuiteJun 2026: 243 CVEs · 123 critical · 1 now in CISA KEV · rank #4 · mostly Webcenter Content, Oracle Webcenter Content, Enterprise Manager Base PlatformJul 2026: 1,108 CVEs · 210 critical · 0 now in CISA KEV · rank #1 · mostly Oracle Coherence, Coherence, Webcenter ContentAug 2026: 890 CVEs · 144 critical · 0 now in CISA KEV · rank #2 · mostly Helidon, Hyperion Financial Management, Oracle Hyperion Financial ManagementSep 2026: 634 CVEs · 97 critical · 0 now in CISA KEV · rank #4 · mostly Oracle Hyperion Financial Management, Hyperion Financial Management, Oracle Business Intelligence Enterprise EditionOct 2026: 1,078 CVEs · 66 critical · 0 now in CISA KEV · rank #2 · mostly Jd Edwards Enterpriseone Tools, Peoplesoft Enterprise Peopletools, MySQL ClusterNov 2026: none that month (the list had room for every one)

In the lens

The products that kept showing up in Oracle's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.

  1. MySQL Server38718 months
  2. MySQL2349 months
  3. Hyperion Financial Management1592 months
  4. Oracle Hyperion Financial Management1592 months
  5. MySQL Cluster1313 months
  6. E-business Suite1179 months
  7. Helidon991 month
  8. Jd Edwards Enterpriseone Tools993 months
  9. Oracle Coherence981 month
  10. Coherence931 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#1 in 53 months, last Jul 2026
Busiest month
Jul 2026, 1,108 CVEs
Months with a KEV entry
50 of 237 on the list
On the top 200 list
237 of 308 monthly snapshots

Each monthly snapshot keeps the top 200 vendors by CVEs. A month below the cut shows the most it could have had: the smallest count that made the list. 19 months have no snapshot because the run failed.

MethodologyAll months on recordThe Oracle hub