CVE Tools
Track your stack

Oracle

12,857 CVEs tracked since 1999. Since Sep 2019, 35 of them reached CISA KEV.

Oracle CVEs per month

Sep 2019 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Oracle CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2019-09190
2019-101511
2019-11170
2019-12301
2020-012222
2020-02111
2020-03240
2020-04no snapshot
2020-05no snapshot
2020-06220
2020-07no snapshot
2020-08151
2020-09170
2020-101734
2020-11121
2020-12291
2021-011691
2021-02230
2021-03no snapshot
2021-041910
2021-05120
2021-06330
2021-071560
2021-08481
2021-09141
2021-101612
2021-11120
2021-12200
2022-011862
2022-02220
2022-03261
2022-04983
2022-05130
2022-0690
2022-07960
2022-083 or fewer
2022-093 or fewer
2022-10811
2022-11220
2022-1250
2023-01822
2023-0280
2023-03no snapshot
2023-04920
2023-053 or fewer
2023-064 or fewer
2023-07570
2023-084 or fewer
2023-0941
2023-10750
2023-114 or fewer
2023-124 or fewer
2024-01430
2024-02471
2024-034 or fewer
2024-041350
2024-055 or fewer
2024-064 or fewer
2024-07631
2024-084 or fewer
2024-093 or fewer
2024-10880
2024-1161
2024-1281
2025-01880
2025-02170
2025-035 or fewer
2025-04730
2025-054 or fewer
2025-064 or fewer
2025-07850
2025-084 or fewer
2025-094 or fewer
2025-10783
2025-114 or fewer
2025-125 or fewer
2026-01660
2026-025 or fewer
2026-037 or fewer
2026-041020
2026-05320
2026-062431
2026-0711080
2026-088900
2026-096340
2026-1010780
2026-110

Products

The products that kept showing up in Oracle's monthly top three, with their CVEs summed over those months.

  1. MySQL Server61924 months
  2. MySQL47916 months
  3. Hyperion Financial Management1592 months
  4. Oracle Hyperion Financial Management1592 months
  5. E-business Suite15811 months
  6. MySQL Cluster1313 months
  7. Jd Edwards Enterpriseone Tools1145 months
  8. Peoplesoft Enterprise Peopletools1004 months
  9. Helidon991 month
  10. Oracle Coherence981 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Oracle.

  1. CVE-2026-91665Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v...9.8
  2. CVE-2026-91668Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl...8.8
  3. CVE-2026-91662Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon t...6.4
  4. CVE-2026-91664Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v...7.5
  5. CVE-2026-91663Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...9.9
  6. CVE-2026-91660Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...4.3
  7. CVE-2026-91661Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...7.7
  8. CVE-2026-91659Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H...7.7
  9. CVE-2026-91656Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo...9.1
  10. CVE-2026-91658Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...9.9
  11. CVE-2026-91657Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...4.3
  12. CVE-2026-91654Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...6.3
  13. CVE-2026-91655Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...9.1
  14. CVE-2026-91653Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo...8.5
  15. CVE-2026-91652Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...5.0

The record

Peak rank
#1 in Jul 2026
Busiest month shown
Jul 2026, 1,108 CVEs
Months with a KEV entry
24 since Sep 2019
Monthly snapshots
237 since 1999
Oracle's full record, month by month