oracle
Safeguard articles tagged "oracle" — guides, analysis, and best practices for software supply chain and application security.
51 articles
CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVE-2024-21287 affects Oracle Agile Product Lifecycle Management (PLM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-21.
CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerability
CVE-2020-2883 affects Oracle WebLogic Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-01-07.
CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVE-2024-20953 affects Oracle Agile Product Lifecycle Management (PLM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-24.
CVE-2025-61882: Oracle E-Business Suite Unspecified Vulnerability
CVE-2025-61882 affects Oracle E-Business Suite and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-06.
CVE-2025-61884: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
CVE-2025-61884 affects Oracle E-Business Suite and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-20.
CVE-2025-61757: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVE-2025-61757 affects Oracle Fusion Middleware and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-11-21.
CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability
CVE-2024-21182 affects Oracle WebLogic Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-01.
CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CVE-2026-35273 affects Oracle PeopleSoft Enterprise PeopleTools and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-12.
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability
CVE-2026-46817 affects Oracle E-Business Suite and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-15.
CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
CVE-2026-21962 affects Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-24.
Three of Oracle's Five Confirmed-Exploited CVEs Are Tied to Ransomware
PeopleSoft and E-Business Suite together account for three ransomware-associated Oracle vulnerabilities in a single year — an unusually high concentration for one vendor.
Oracle E-Business Suite's Payments Module Had an 'Easily Exploitable' Unauthenticated Bug
CVE-2026-46817, which Oracle itself describes as easily exploitable, sits in the Payments component of Oracle E-Business Suite versions 12.2.3 through 12.2.15.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.