boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Oracle

Vendor reference — Oracle · sector: Enterprise Applications. Cumulative disclosure record across the archive.

Follow Oracle — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs29302905
KEV entries284
Rate & severity
KEV/100Med CVSSMed EPSSCHML
1.07.8.00365951671563101

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▃█▇▅▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-120
2026-013
2026-020
2026-030
2026-042
2026-0525
2026-06242
2026-071109
2026-08890
2026-09634
2026-100

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2020-148829.8100.0CRITICALYES2020-10-21
CVE-2017-102717.5100.0HIGHYES2022-02-10
CVE-2019-27259.8100.0CRITICALYES2022-01-10
CVE-2018-26289.8100.0CRITICALYES2018-04-19
CVE-2023-218397.5100.0HIGHYES2023-01-17
CVE-2025-618829.8100.0CRITICALYES2025-10-06
CVE-2020-147509.899.9CRITICALYES2020-11-01
CVE-2022-215879.899.9CRITICALYES2022-10-18
CVE-2020-148837.299.9HIGHYES2020-10-21
CVE-2020-148647.599.9HIGHYES2020-10-21
CVE-2020-25559.899.9CRITICALYES2020-01-15
CVE-2021-355879.899.9CRITICALYES2022-01-19
CVE-2017-35067.499.9HIGHYES2017-04-24
CVE-2025-618847.599.9HIGHYES2025-10-20
CVE-2020-28839.899.9CRITICALYES2020-04-15

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-831157.531.4HIGH—2026-09-15
CVE-2026-833118.519.7HIGH—2026-09-15
CVE-2026-872888.129.2HIGH—2026-09-15
CVE-2026-872878.129.2HIGH—2026-09-15
CVE-2026-872868.129.2HIGH—2026-09-15
CVE-2026-872767.52.0HIGH—2026-09-15
CVE-2026-872738.67.2HIGH—2026-09-15
CVE-2026-872727.84.7HIGH—2026-09-15
CVE-2026-872717.84.7HIGH—2026-09-15
CVE-2026-872707.84.7HIGH—2026-09-15
CVE-2026-872697.84.7HIGH—2026-09-15
CVE-2026-872687.84.7HIGH—2026-09-15
CVE-2026-834088.134.4HIGH—2026-09-15
CVE-2026-833578.137.2HIGH—2026-09-15
CVE-2026-832839.839.6CRITICAL—2026-09-15

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
Oracle Hyperion Financial Management1590
Oracle Coherence1130
Helidon1120
Oracle Commerce Guided Search / Oracle Commerce Experience Manager1050
Oracle WebCenter Content930
Oracle Hyperion Infrastructure Technology670
Oracle VM VirtualBox660
Oracle WebCenter Portal610
Oracle Hyperion Data Relationship Management560
MySQL Cluster460
Oracle WebCenter Sites460
Oracle Business Intelligence Enterprise Edition430
Oracle Enterprise Manager Base Platform430
Oracle WebCenter Enterprise Capture430
MySQL Server420
Oracle Reports Developer410
Oracle Access Manager370
Oracle WebLogic Server370
Siebel CRM Deployment370
Oracle Hyperion Calculation Manager360
Siebel CRM Cloud Applications360
Oracle Hyperion Financial Reporting320
Oracle Unified Directory320
PeopleSoft Enterprise PeopleTools311
Service Delivery Platform290
Oracle BI Publisher280
Oracle Database Server280
Oracle Agile PLM260
Oracle Identity Manager250
Oracle Java SE240
WebLogic Server2411
JD Edwards EnterpriseOne Tools230
Siebel CRM Integration220
Oracle Agile Engineering Data Management210
Oracle Agile PLM MCAD Connector210
Oracle Identity Manager Connector210
Oracle Product Hub180
Oracle Forms170
Oracle JDeveloper170
WebCenter Content: Imaging170
Oracle Platform Security For Java160
Oracle Application Object Library150
Oracle Enterprise Command Center Framework150
Oracle Application Testing Suite140
Oracle Applications Framework140
Oracle Internet Directory140
Oracle Payroll140
Siebel Apps - Marketing140
Oracle HRMS (US)130
Oracle Purchasing130
MySQL Connectors120
Oracle Bills Of Material120
Oracle Commerce Platform120
Oracle Cost Management120
Oracle GoldenGate120
Oracle HRMS (UK)120
Oracle Order Management120
Oracle Workflow120
PeopleSoft Enterprise CS Campus Community120
Oracle Contracts Integration110
Oracle GraalVM Enterprise Edition110
Oracle GraalVM For JDK110
Oracle Payments111
Oracle Product Lifecycle Analytics110
Oracle Work In Process110
TimesTen In-Memory Database110
Oracle REST Data Services100
Oracle Time And Labor100
Oracle ISupport100
Siebel CRM End User100
Oracle Agile Product Lifecycle Management For Process90
Oracle Applications Manager90
Oracle Complex Maintenance, Repair And Overhaul90
Oracle Data Integrator90
Oracle Production Scheduling90
Oracle SOA Suite90
Oracle Enterprise Asset Management80
Oracle General Ledger80
Oracle Installed Base80
Oracle Mobile Application Server80
Oracle Product Workbench80
Oracle Project Portfolio Analysis80
Oracle Public Sector Financials80
Oracle Solaris80
Oracle Universal Work Queue80
Oracle IRecruitment80
Oracle IStore80
PeopleSoft Enterprise PT PeopleTools80
Identity Manager71
Oracle Advanced Benefits70
Oracle HTTP Server70
Oracle Hyperion Profitability And Cost Management70
Oracle Managed File Transfer70
Oracle Marketing70
Oracle Price Protection70
Oracle Quality70
Oracle Scripting70
PeopleSoft Enterprise FIN Common Objects Argentina70
PeopleSoft Enterprise FIN Common Objects Brazil70
Oracle Autonomous Health Framework60
Oracle Call Center Technology60
Oracle Demand Signal Repository60
Oracle EDI Gateway60
Oracle Field Service60
Oracle Financials Common Modules60
Oracle Flow Manufacturing60
Oracle Hospitality Simphony60
Oracle Labor Distribution60
Oracle Process Manufacturing Systems60
Oracle Sales Offline60
Oracle ISupplier Portal60
PeopleSoft Enterprise CS Student Records60
Oracle Advanced Pricing50
Oracle Applications DBA50
Oracle Depot Repair50
Oracle Document Management And Collaboration50
Oracle Human Resources50
Oracle Learning Management50
Oracle Lease And Finance Management50
Oracle One-to-One Fulfillment50
Oracle Project Manufacturing50
Oracle Property Manager50
Oracle Public Sector Payroll50
Oracle SDP Number Portability50
Oracle Spares Management50
Oracle Utilities Network Management System50
Oracle Warehouse Management50
Oracle Web Services Manager50
Siebel CRM Development50
Identity Manager Connector40
MySQL Router40
MySQL Shell40
Oracle Advanced Inbound Telephony40
Oracle Advanced Outbound Telephony40
Oracle Application Development Framework (ADF)40
Oracle Commerce Guided Search Platform Services40
Oracle Common Applications Calendar40
Oracle Communications Converged Application Server40
Oracle Contract Lifecycle Management For Public Sector40
Oracle Customer Interaction History40
Oracle Customers Online40
Oracle E-Business Intelligence40
Oracle E-Business Tax40
Oracle HCM Configuration Workbench40
Oracle HR Intelligence40
Oracle Inventory Management40
Oracle Outside In Technology40
Oracle Process Manufacturing Logistics40
Oracle Process Manufacturing Product Development40
Oracle Process Manufacturing Regulatory Management40
Oracle Public Sector Financials (International)40
Oracle Public Sector Human Resources40
Oracle Report Manager40
Oracle Sales40
Oracle Service Fulfillment Manager40
Oracle Trading Community40
Oracle Transportation Management40
Oracle U.S. Federal Financials40
Oracle XML Gateway40
Applications DBA30
JD Edwards EnterpriseOne CRM Foundation30
JD Edwards EnterpriseOne Human Resources Management30
Oracle Assets30
Oracle Communications Cloud Native Core Security Edge Protection Proxy30
Oracle Communications Unified Inventory Management30
Oracle Contracts30
Oracle Customer Care30
Oracle Financials For EMEA30
Oracle GraalVM30
Oracle HRMS (France)30
Oracle HRMS (India)30
Oracle HRMS (Norway)30
Oracle Interaction Blending30
Oracle Internet Procurement Connector30
Oracle Java SE, Oracle GraalVM For JDK, Oracle GraalVM Enterprise Edition30
Oracle Loans30
Oracle MES For Process Manufacturing30
Oracle Partner Management30
Oracle Payables30
Oracle Project Contracts30
Oracle Project Intelligence30
Oracle Proposals30
Oracle Receivables30
Oracle Risk Management30
Oracle Sales Online30
Oracle Supply Chain Trading Connector30
Oracle Trade Management30
Oracle Transportation Execution30
Oracle IReceivables30
Oracle ISetup30
PeopleSoft Enterprise CC Common Application Objects30
PeopleSoft Enterprise CS Financial Aid30
PeopleSoft Enterprise HCM Human Resources30
PeopleSoft Enterprise SCM Order Management30
Siebel CRM Administration30
JD Edwards EnterpriseOne Accounts Payable20
JD Edwards EnterpriseOne General Ledger20
JD Edwards EnterpriseOne HCM Foundation20
JD Edwards EnterpriseOne Orchestrator20
Oracle APEX20
Oracle Alert20
Oracle Applications Technology Stack20
Oracle Banking Branch20
Oracle Banking Origination20
Oracle Banking Trade Finance20
Oracle Cash Management20
Oracle Common Applications20
Oracle Communications Billing And Revenue Management20
Oracle Compensation Workbench20
Oracle Concurrent Processing21
Oracle Configure To Order20
Oracle Content Manager20
Oracle Demand Planning20
Oracle Demantra Demand Management20
Oracle E-Business Suite Secure Enterprise Search20
Oracle Engineering20
Oracle Enterprise Manager For Systems Infrastructure20
Oracle Essbase20
Oracle Financials For Asia/Pacific20
Oracle Fusion Middleware Control20
Oracle GraalVM For JDK, Oracle GraalVM20
Oracle HCM Common Architecture20
Oracle Hospitality OPERA 5 Property Services20
Oracle In-Memory Cost Management For Discrete Industries20
Oracle Knowledge Management20
Oracle Landed Cost Management20
Oracle Outsourced Mfg For Discrete Industries20
Oracle Performance Management20
Oracle Process Manufacturing Financials20
Oracle Project Foundation20
Oracle Retail Integration Bus20
Oracle Retail Xstore Point Of Service20
Oracle Sales Foundation20
Oracle Sales For Handhelds20
Oracle Self-Service Human Resources20
Oracle Service Contracts20
Oracle Shipping Execution20
Oracle Site Hub20
Oracle Subledger Accounting20
Oracle TeleSales20
Oracle Telecommunications Billing Integrator20
Oracle Teleservice20
Oracle US Federal Human Resources20
Oracle User Management20
Oracle Virtual Directory20
Oracle Web Applications Desktop Integrator20
Oracle Weblogic Server Proxy Plug-in20
Oracle Yard Management20
PeopleSoft Enterprise CS Student Financials20
PeopleSoft Enterprise FIN Cash Management20

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2026-219622026-08-2410.099.4CRITICAL
CVE-2026-468172026-07-159.855.7CRITICAL
CVE-2026-352732026-06-129.895.3CRITICAL
CVE-2024-211822026-06-017.599.5HIGH
CVE-2025-617572025-11-219.899.8CRITICAL
CVE-2025-618842025-10-207.599.9HIGH
CVE-2025-618822025-10-069.8100.0CRITICAL
CVE-2024-209532025-02-248.890.1HIGH
CVE-2020-28832025-01-079.899.9CRITICAL
CVE-2024-212872024-11-217.576.8HIGH
CVE-2022-214452024-09-189.899.2CRITICAL
CVE-2020-146442024-09-189.899.9CRITICAL
CVE-2017-35062024-06-037.499.9HIGH
CVE-2020-25512023-11-169.899.8CRITICAL
CVE-2023-218392023-05-017.5100.0HIGH
CVE-2022-215872023-02-029.899.9CRITICAL
CVE-2021-355872022-11-289.899.9CRITICAL
CVE-2018-26282022-09-089.8100.0CRITICAL
CVE-2019-30102022-05-258.896.3HIGH
CVE-2019-26162022-03-257.299.8HIGH
CVE-2017-102712022-02-107.5100.0HIGH
CVE-2020-148642022-01-187.599.9HIGH
CVE-2019-27252022-01-109.8100.0CRITICAL
CVE-2020-148832021-11-037.299.9HIGH
CVE-2020-148822021-11-039.8100.0CRITICAL

KEV timing

Fastest to KEV
CVEDays
CVE-2017-102710
CVE-2019-27250
CVE-2025-618820
CVE-2025-618840
CVE-2026-352730
CVE-2026-468170
CVE-2024-212873
CVE-2025-6175731
CVE-2023-21839104
CVE-2022-21587107
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2019-26162022-04-151637
CVE-2020-25552022-05-031619
CVE-2020-148712022-05-031619
CVE-2020-147502022-05-031619
CVE-2020-148822022-05-031619
CVE-2020-148832022-05-031619
CVE-2019-30102022-06-151576
CVE-2019-27252022-07-101551
CVE-2020-148642022-07-181543
CVE-2017-102712022-08-101520

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.