Oracle: 악용된 취약점
- 46악용된 취약점
- 13랜섬웨어에 사용됨
- 2026. 8. 24.가장 최근 추가
- WebLogic Server 12
- Java SE 7
- Fusion Middleware 6
- E-Business Suite 4
- Java Runtime Environment (JRE) 4
- Agile Product Lifecycle Management (PLM) 2
- HTTP Server and Oracle Weblogic Server Proxy Plug-in 1
- PeopleSoft Enterprise PeopleTools 1
- ADF Faces 1
- Java SE and JRockit 1
- Solaris 1
- BI Publisher (Formerly XML Publisher) 1
- Java SE JDK and JRE 1
- VirtualBox 1
- Intelligence Enterprise Edition 1
- Multiple Products 1
- Solaris and Zettabyte File System (ZFS) 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 8. 24. | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 치명적 10.0 | 73% |
| 2026. 7. 15. | Improper Privilege Management | E-Business Suite | 치명적 9.8 | 12% |
| 2026. 6. 12. | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | 치명적 9.8 | 97% |
| 2026. 6. 1. | Unspecified | WebLogic Server | 높음 7.5 | 74% |
| 2025. 11. 21. | Missing Authentication for Critical Function | Fusion Middleware | 치명적 9.8 | 89% |
| 2025. 10. 20. | Server-Side Request Forgery (SSRF) | E-Business Suite | 높음 7.5 | 96% |
| 2025. 10. 6. | Unspecified | E-Business Suite | 치명적 9.8 | 99.7% |
| 2025. 2. 24. | Deserialization | Agile Product Lifecycle Management (PLM) | 높음 8.8 | 3.9% |
| 2025. 1. 7. | Unspecified | WebLogic Server | 치명적 9.8 | 95% |
| 2024. 11. 21. | Incorrect Authorization | Agile Product Lifecycle Management (PLM) | 높음 7.5 | 1.7% |
| 2024. 9. 18. | Deserialization of Untrusted Data | ADF Faces | 치명적 9.8 | 62% |
| 2024. 9. 18. | Remote Code Execution | WebLogic Server | 치명적 9.8 | 95% |
| 2024. 6. 3. | OS Command Injection | WebLogic Server | 높음 7.4 | 96% |
| 2023. 11. 16. | Unspecified | Fusion Middleware | 치명적 9.8 | 93% |
| 2023. 5. 12. | Unspecified | Java SE and JRockit | 치명적 9.8 | 92% |
| 2023. 5. 1. | Unspecified | WebLogic Server | 높음 7.5 | 99.9% |
| 2023. 2. 2. | Unspecified | E-Business Suite | 치명적 9.8 | 98% |
| 2022. 11. 28. | Unspecified | Fusion Middleware | 치명적 9.8 | 96% |
| 2022. 9. 8. | Unspecified | WebLogic Server | 치명적 9.8 | >99.9% |
| 2022. 5. 25. | Privilege Escalation | Solaris | 높음 8.8 | 13% |
| 2022. 5. 25. | JRE Unspecified | Java Runtime Environment (JRE) | 낮음 3.7 | 85% |
| 2022. 5. 25. | JRE Sandbox Bypass | Java Runtime Environment (JRE) | 낮음 3.7 | 90% |
| 2022. 5. 25. | JRE Remote Code Execution | Java Runtime Environment (JRE) | 치명적 9.8 | 97% |
| 2022. 5. 25. | Unspecified | Fusion Middleware | 치명적 9.8 | 7.8% |
| 2022. 5. 25. | JRE Unspecified | Java Runtime Environment (JRE) | 치명적 9.8 | 96% |
| 2022. 3. 28. | Unspecified | Java SE | 치명적 9.8 | 99% |
| 2022. 3. 28. | Sandbox Bypass | Java SE | 치명적 9.8 | 91% |
| 2022. 3. 28. | Unspecified | Fusion Middleware | 보통 4.7 | 4.7% |
| 2022. 3. 25. | BI Publisher Unauthorized Access | BI Publisher (Formerly XML Publisher) | 높음 7.2 | 92% |
| 2022. 3. 3. | Integrity Check | Java SE | 보통 5.3 | 14% |
| 2022. 3. 3. | and Java SE Embedded Remote Code Execution | Java SE | 치명적 9.8 | 25% |
| 2022. 3. 3. | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 치명적 9.8 | 99% |
| 2022. 3. 3. | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 치명적 9.8 | 94% |
| 2022. 3. 3. | Runtime Environment (JRE) Arbitrary Code Execution | Java SE | 치명적 9.8 | 98% |
| 2022. 3. 3. | Java SE Runtime Environment (JRE) Arbitrary Code Execution | Java SE JDK and JRE | 치명적 9.8 | 97% |
| 2022. 3. 3. | Insufficient Input Validation | VirtualBox | 높음 8.8 | 6.9% |
| 2022. 2. 10. | Corporation WebLogic Server Remote Code Execution | WebLogic Server | 높음 7.5 | >99.9% |
| 2022. 1. 18. | Business Intelligence Enterprise Edition Path Transversal | Intelligence Enterprise Edition | 높음 7.5 | 97% |
| 2022. 1. 10. | WebLogic Server, Injection | WebLogic Server | 높음 7.5 | >99.9% |
| 2021. 11. 3. | Remote Code Execution | Multiple Products | 치명적 9.8 | 97% |
| 2021. 11. 3. | Unspecified | WebLogic Server | 높음 7.2 | 98% |
| 2021. 11. 3. | Remote Code Execution | WebLogic Server | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Unspecified | Solaris and Zettabyte File System (ZFS) | 치명적 10.0 | 80% |
| 2021. 11. 3. | Remote Code Execution | WebLogic Server | 치명적 9.8 | 99.2% |
| 2021. 11. 3. | Deserialization of Untrusted Data | WebLogic Server | 치명적 9.8 | 95% |
| 2021. 11. 3. | Unspecified | Fusion Middleware | 치명적 9.1 | 99% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.