Oracle
CISA 가 실제 악용을 확인해 등재한 Oracle 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerabili…70.9%심각10.0● 실제 악용이 확인됨CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability0.8%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerabi…9.4%심각9.8● 실제 악용이 확인됨CVE-2024-21182Oracle WebLogic Server Unspecified Vulnerability74.2%높음7.5● 실제 악용이 확인됨CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability88.6%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability95.9%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2025-61882Oracle E-Business Suite Unspecified Vulnerability99.7%심각9.8● 실제 악용이 확인됨CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability3.9%높음8.8
등재된 제품
17종
HTTP Server and Oracle Weblogic Server Proxy Plug-in 1E-Business Suite 4 PeopleSoft Enterprise PeopleTools 1WebLogic Server 12Fusion Middleware 6Agile Product Lifecycle Management (PLM) 2ADF Faces 1Java SE and JRockit 1Solaris 1Java Runtime Environment (JRE) 4Java SE 7BI Publisher (Formerly XML Publisher) 1VirtualBox 1Java SE JDK and JRE 1Intelligence Enterprise Edition 1Multiple Products 1Solaris and Zettabyte File System (ZFS) 1
전체 목록
Oracle · 46건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2026-21962 | 2026-08-24 | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper A… | 70.9% | 심각10.0 | 2026-08-27 |
| CVE-2026-46817 | 2026-07-15 | E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 0.8% | 심각9.8 | 2026-07-18 |
| CVE-2026-35273 랜섬웨어 악용 | 2026-06-12 | PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Cr… | 9.4% | 심각9.8 | 2026-06-15 |
| CVE-2024-21182 | 2026-06-01 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 74.2% | 높음7.5 | 2026-06-04 |
| CVE-2025-61757 | 2025-11-21 | Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function … | 88.6% | 심각9.8 | 2025-12-12 |
| CVE-2025-61884 랜섬웨어 악용 | 2025-10-20 | E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerabili… | 95.9% | 높음7.5 | 2025-11-10 |
| CVE-2025-61882 랜섬웨어 악용 | 2025-10-06 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 99.7% | 심각9.8 | 2025-10-27 |
| CVE-2024-20953 | 2025-02-24 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulner… | 3.9% | 높음8.8 | 2025-03-17 |
| CVE-2020-2883 | 2025-01-07 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 94.9% | 심각9.8 | 2025-01-28 |
| CVE-2024-21287 | 2024-11-21 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorizatio… | 1.7% | 높음7.5 | 2024-12-12 |
| CVE-2022-21445 | 2024-09-18 | ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | 62.5% | 심각9.8 | 2024-10-09 |
| CVE-2020-14644 | 2024-09-18 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 94.5% | 심각9.8 | 2024-10-09 |
| CVE-2017-3506 | 2024-06-03 | WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | 96.3% | 높음7.4 | 2024-06-24 |
| CVE-2020-2551 | 2023-11-16 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 93.2% | 심각9.8 | 2023-12-07 |
| CVE-2016-3427 | 2023-05-12 | Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | 92.3% | 심각9.8 | 2023-06-02 |
| CVE-2023-21839 | 2023-05-01 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 99.9% | 높음7.5 | 2023-05-22 |
| CVE-2022-21587 랜섬웨어 악용 | 2023-02-02 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 98.3% | 심각9.8 | 2023-02-23 |
| CVE-2021-35587 | 2022-11-28 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 96.3% | 심각9.8 | 2022-12-19 |
| CVE-2018-2628 | 2022-09-08 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 100.0% | 심각9.8 | 2022-09-29 |
| CVE-2012-1710 랜섬웨어 악용 | 2022-05-25 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 7.8% | 심각9.8 | 2022-06-15 |
| CVE-2019-3010 | 2022-05-25 | Solaris | Oracle Solaris Privilege Escalation Vulnerability | 13.4% | 높음8.8 | 2022-06-15 |
| CVE-2010-0840 | 2022-05-25 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 96.3% | 심각9.8 | 2022-06-15 |
| CVE-2013-2423 | 2022-05-25 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 85.2% | 낮음3.7 | 2022-06-15 |
| CVE-2013-0431 랜섬웨어 악용 | 2022-05-25 | Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | 90.1% | 보통5.3 | 2022-06-15 |
| CVE-2013-0422 랜섬웨어 악용 | 2022-05-25 | Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | 97.0% | 심각9.8 | 2022-06-15 |
| CVE-2012-0518 | 2022-03-28 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 4.7% | 보통4.7 | 2022-04-18 |
| CVE-2013-2465 랜섬웨어 악용 | 2022-03-28 | Java SE | Oracle Java SE Unspecified Vulnerability | 98.8% | 심각9.8 | 2022-04-18 |
| CVE-2012-5076 | 2022-03-28 | Java SE | Oracle Java SE Sandbox Bypass Vulnerability | 91.3% | 심각9.8 | 2022-04-18 |
| CVE-2019-2616 | 2022-03-25 | BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | 92.2% | 높음7.2 | 2022-04-15 |
| CVE-2012-4681 랜섬웨어 악용 | 2022-03-03 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vuln… | 98.5% | 심각9.8 | 2022-03-24 |
| CVE-2015-2590 | 2022-03-03 | Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerabilit… | 25.5% | 심각9.8 | 2022-03-24 |
| CVE-2008-3431 | 2022-03-03 | VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | 6.9% | 높음8.8 | 2022-03-24 |
| CVE-2015-4902 | 2022-03-03 | Java SE | Oracle Java SE Integrity Check Vulnerability | 13.6% | 보통5.3 | 2022-03-24 |
| CVE-2012-1723 랜섬웨어 악용 | 2022-03-03 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vuln… | 93.7% | 심각9.8 | 2022-03-24 |
| CVE-2011-3544 | 2022-03-03 | Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vuln… | 96.7% | 심각9.8 | 2022-03-24 |
| CVE-2012-0507 랜섬웨어 악용 | 2022-03-03 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vuln… | 98.1% | 심각9.8 | 2022-03-24 |
| CVE-2017-10271 랜섬웨어 악용 | 2022-02-10 | WebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability | 100.0% | 높음7.5 | 2022-08-10 |
| CVE-2020-14864 | 2022-01-18 | Intelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | 97.2% | 높음7.5 | 2022-07-18 |
| CVE-2019-2725 랜섬웨어 악용 | 2022-01-10 | WebLogic Server | Oracle WebLogic Server, Injection | 100.0% | 심각9.8 | 2022-07-10 |
| CVE-2015-4852 | 2021-11-03 | WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 96.0% | 심각9.8 | 2022-05-03 |
| CVE-2020-2555 | 2021-11-03 | Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | 97.1% | 심각9.8 | 2022-05-03 |
| CVE-2012-3152 | 2021-11-03 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 98.8% | 심각9.1 | 2022-05-03 |
| CVE-2020-14750 | 2021-11-03 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 99.3% | 심각9.8 | 2022-05-03 |
| CVE-2020-14882 | 2021-11-03 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | 100.0% | 심각9.8 | 2022-05-03 |
| CVE-2020-14883 | 2021-11-03 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 97.9% | 높음7.2 | 2022-05-03 |
| CVE-2020-14871 | 2021-11-03 | Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerabili… | 80.2% | 심각10.0 | 2022-05-03 |