Oracle：悪用された脆弱性
- 46件の悪用された脆弱性
- 13ランサムウェアで使用
- 2026/08/24最新の追加
- WebLogic Server 12
- Java SE 7
- Fusion Middleware 6
- E-Business Suite 4
- Java Runtime Environment (JRE) 4
- Agile Product Lifecycle Management (PLM) 2
- HTTP Server and Oracle Weblogic Server Proxy Plug-in 1
- PeopleSoft Enterprise PeopleTools 1
- ADF Faces 1
- Java SE and JRockit 1
- Solaris 1
- BI Publisher (Formerly XML Publisher) 1
- Java SE JDK and JRE 1
- VirtualBox 1
- Intelligence Enterprise Edition 1
- Multiple Products 1
- Solaris and Zettabyte File System (ZFS) 1
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2026/08/24 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 緊急 10.0 | 73% |
| 2026/07/15 | Improper Privilege Management | E-Business Suite | 緊急 9.8 | 12% |
| 2026/06/12 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | 緊急 9.8 | 97% |
| 2026/06/01 | Unspecified | WebLogic Server | 高 7.5 | 74% |
| 2025/11/21 | Missing Authentication for Critical Function | Fusion Middleware | 緊急 9.8 | 89% |
| 2025/10/20 | Server-Side Request Forgery (SSRF) | E-Business Suite | 高 7.5 | 96% |
| 2025/10/06 | Unspecified | E-Business Suite | 緊急 9.8 | 99.7% |
| 2025/02/24 | Deserialization | Agile Product Lifecycle Management (PLM) | 高 8.8 | 3.9% |
| 2025/01/07 | Unspecified | WebLogic Server | 緊急 9.8 | 95% |
| 2024/11/21 | Incorrect Authorization | Agile Product Lifecycle Management (PLM) | 高 7.5 | 1.7% |
| 2024/09/18 | Deserialization of Untrusted Data | ADF Faces | 緊急 9.8 | 62% |
| 2024/09/18 | Remote Code Execution | WebLogic Server | 緊急 9.8 | 95% |
| 2024/06/03 | OS Command Injection | WebLogic Server | 高 7.4 | 96% |
| 2023/11/16 | Unspecified | Fusion Middleware | 緊急 9.8 | 93% |
| 2023/05/12 | Unspecified | Java SE and JRockit | 緊急 9.8 | 92% |
| 2023/05/01 | Unspecified | WebLogic Server | 高 7.5 | 99.9% |
| 2023/02/02 | Unspecified | E-Business Suite | 緊急 9.8 | 98% |
| 2022/11/28 | Unspecified | Fusion Middleware | 緊急 9.8 | 96% |
| 2022/09/08 | Unspecified | WebLogic Server | 緊急 9.8 | >99.9% |
| 2022/05/25 | Privilege Escalation | Solaris | 高 8.8 | 14% |
| 2022/05/25 | JRE Unspecified | Java Runtime Environment (JRE) | 低 3.7 | 85% |
| 2022/05/25 | JRE Sandbox Bypass | Java Runtime Environment (JRE) | 低 3.7 | 90% |
| 2022/05/25 | JRE Remote Code Execution | Java Runtime Environment (JRE) | 緊急 9.8 | 97% |
| 2022/05/25 | Unspecified | Fusion Middleware | 緊急 9.8 | 7.8% |
| 2022/05/25 | JRE Unspecified | Java Runtime Environment (JRE) | 緊急 9.8 | 96% |
| 2022/03/28 | Unspecified | Java SE | 緊急 9.8 | 99% |
| 2022/03/28 | Sandbox Bypass | Java SE | 緊急 9.8 | 91% |
| 2022/03/28 | Unspecified | Fusion Middleware | 中 4.7 | 4.7% |
| 2022/03/25 | BI Publisher Unauthorized Access | BI Publisher (Formerly XML Publisher) | 高 7.2 | 92% |
| 2022/03/03 | Integrity Check | Java SE | 中 5.3 | 14% |
| 2022/03/03 | and Java SE Embedded Remote Code Execution | Java SE | 緊急 9.8 | 25% |
| 2022/03/03 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 緊急 9.8 | 99% |
| 2022/03/03 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 緊急 9.8 | 94% |
| 2022/03/03 | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 緊急 9.8 | 98% |
| 2022/03/03 | Java SE Runtime Environment (JRE) Arbitrary Code Execution | Java SE JDK and JRE | 緊急 9.8 | 97% |
| 2022/03/03 | Insufficient Input Validation | VirtualBox | 高 8.8 | 6.9% |
| 2022/02/10 | Corporation WebLogic Server Remote Code Execution | WebLogic Server | 高 7.5 | >99.9% |
| 2022/01/18 | Business Intelligence Enterprise Edition Path Transversal | Intelligence Enterprise Edition | 高 7.5 | 97% |
| 2022/01/10 | WebLogic Server, Injection | WebLogic Server | 高 7.5 | >99.9% |
| 2021/11/03 | Remote Code Execution | Multiple Products | 緊急 9.8 | 97% |
| 2021/11/03 | Unspecified | WebLogic Server | 高 7.2 | 98% |
| 2021/11/03 | Remote Code Execution | WebLogic Server | 緊急 9.8 | >99.9% |
| 2021/11/03 | Unspecified | Solaris and Zettabyte File System (ZFS) | 緊急 10.0 | 80% |
| 2021/11/03 | Remote Code Execution | WebLogic Server | 緊急 9.8 | 99.2% |
| 2021/11/03 | Deserialization of Untrusted Data | WebLogic Server | 緊急 9.8 | 95% |
| 2021/11/03 | Unspecified | Fusion Middleware | 緊急 9.1 | 99% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。