U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Nov 22, 10:34 UTC · Nov 22, 2025Exploit / PoC in the wildCVE-2025-6175760
CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities CatalogSecurity Affairs·Dec 16, 08:46 UTC · Dec 16, 2022Exploit / PoC in the wildCVE-2021-3558760
Oracle Fusion Middleware Vulnerability Actively Exploited in the Wild: CISAInfosecurity Magazine·Nov 29, 18:12 UTC · Nov 29, 2022Exploit / PoC in the wildCVE-2021-35587CVE-2022-413560
Pre-auth RCE in Oracle Fusion Middleware exploited in the wild (CVE-2021-35587)Help Net Security·Nov 29, 00:00 UTC · Nov 29, 2022Exploit / PoC in the wildCVE-2021-3558760
CISA Warns of Actively Exploited Critical Oracle Fusion Middleware VulnerabilityThe Hacker News·Nov 29, 08:07 UTC · Nov 29, 2022Vulnerability in the wildCVE-2021-35587CVE-2022-413560
Oracle issues emergency patches for JOLTANDBLEED flawsSecurity Affairs·Nov 17, 11:19 UTC · Nov 17, 2017VulnerabilityCVE-2017-10272CVE-2017-10267CVE-2017-10278+2 CVEs60
Oracle July 2017 Critical Patch Update addresses record-breaking 308 issuesSecurity Affairs·Jul 19, 14:51 UTC · Jul 19, 2017VulnerabilityCVE-2017-3632CVE-2017-10137CVE-2017-1024460
Oracle Out of Cycle Apache Patch – CVE-2011Kaspersky Securelist·Sep 16, 22:32 UTC · Sep 16, 2011Vulnerability in the wildCVE-2011-3192CVE-2007-008660
Researchers flag new Oracle WebLogic zero-day RCE flawHelp Net Security·Apr 25, 00:00 UTC · Apr 25, 2019Exploit / PoC in the wildCVE-2019-272560
Oracle releases emergency Oracle Identity Manager patchHelp Net Security·Oct 31, 00:00 UTC · Oct 31, 2017Vulnerability in the wildCVE-2017-1015160
Oracle CPU October 2018: 301 vulnerabilities patchedHelp Net Security·Oct 17, 00:00 UTC · Oct 17, 2018VulnerabilityCVE-2018-291360
Massive Oracle Critical Patch Update fixes 270 vulnerabilitiesHelp Net Security·May 28, 10:21 UTC · May 28, 2020Vulnerability55
Oracle issues an emergency patch for a bug in Oracle Identity Manager, apply it now!Security Affairs·Nov 1, 10:07 UTC · Nov 1, 2017VulnerabilityCVE-2017-1015160
⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Data breachCVE-2025-22457CVE-2025-24061CVE-2025-2407+15 CVEs60
Oracle confirms the hack of two obsolete servers hacked. No Oracle Cloud systems or customer data were affectedSecurity Affairs·Apr 10, 09:40 UTC · Apr 10, 2025Data breach60
Oracle privately notifies Cloud data breach to customersSecurity Affairs·Apr 6, 20:33 UTC · Apr 6, 2025Data breach60
Highly Critical Flaw (CVSS Score 10) Lets Hackers Hijack Oracle Identity ManagerThe Hacker News·Oct 31, 08:01 UTC · Oct 31, 2017VulnerabilityCVE-2017-1015160
NSA details top 25 flaws exploited by ChinaSecurity Affairs·Oct 20, 19:28 UTC · Oct 20, 2020Exploit / PoCCVE-2019-11510CVE-2020-5902CVE-2019-19781+22 CVEs60
Week in review: Log4Shell lingers, NIS2 directive adopted, LastPass breached (again)Help Net Security·Dec 4, 00:00 UTC · Dec 4, 2022Data breach in the wildCVE-2021-3558760
Muhstik Botnet Targeting Redis Servers Using Recently Disclosed VulnerabilityThe Hacker News·Mar 28, 06:59 UTC · Mar 28, 2022Vulnerability in the wildCVE-2022-0543CVE-2017-10271CVE-2018-7600+3 CVEs60
Threat Source newsletter (April 21, 2022) — Sideloading apps is as safe as you make itCisco Talos·Apr 21, 18:00 UTC · Apr 21, 2022Vulnerability55
CISA adds Oracle WebLogic Server flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 3, 18:29 UTC · Jun 3, 2024Exploit / PoC in the wildCVE-2017-350660
More than 150 Oracle Access Management systems exposed to bug highlighted by CISAThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Exploit / PoC in the wildCVE-2021-3558760
CISA Urges Patch of Actively Exploited Flaw in Oracle Identity ManagerInfosecurity Magazine·Nov 24, 11:07 UTC · Nov 24, 2025Vulnerability in the wildCVE-2025-61757CVE-2021-3558760
8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominersHelp Net Security·Dec 20, 00:00 UTC · Dec 20, 2023VulnerabilityCVE-2020-14883CVE-2017-3506CVE-2020-1488260
Oracle botches CVE-2018-2628 patch and hackers promptly start scanning for vulnerable WebLogic installsSecurity Affairs·Apr 30, 10:05 UTC · Apr 30, 2018VulnerabilityCVE-2018-262860
Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)Help Net Security·Mar 23, 00:00 UTC · Mar 23, 2026Vulnerability in the wildCVE-2026-21992CVE-2025-6175760
Oracle fixes critical RCE flaw CVE-2026Security Affairs·Mar 22, 15:37 UTC · Mar 22, 2026Vulnerability in the wildCVE-2026-21992CVE-2025-6175760
CVE-2018-2879 - Vulnerability in Oracle Access Manager can let attackers impersonate any user accountSecurity Affairs·May 3, 13:46 UTC · May 3, 2018VulnerabilityCVE-2018-287960
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware WavesThe Hacker News·Nov 21, 06:45 UTC · Nov 21, 2025MalwareCVE-2025-61757CVE-2025-1124360
CISA Warns of Actively Exploited Critical Oracle Identity Manager ZeroThe Hacker News·Nov 22, 14:50 UTC · Nov 22, 2025Advisory in the wildCVE-2025-6175760
Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)Help Net Security·Nov 22, 09:12 UTC · Nov 22, 2023Exploit / PoC in the wildCVE-2023-1671CVE-2020-255160
CISA Adds Three Security Flaws with Active Exploitation to KEV CatalogThe Hacker News·Nov 18, 04:36 UTC · Nov 18, 2023Exploit / PoC in the wildCVE-2023-36584CVE-2023-1671CVE-2020-2551+4 CVEs60
Oracle spent 6 months to fix 'Mega' flaws in the Fusion MiddlewareSecurity Affairs·Jun 25, 20:08 UTC · Jun 25, 2022Vulnerability55
Easily exploitable RCE in Oracle WebLogic Server under attack (CVE-2020-14882)Help Net Security·Nov 3, 08:52 UTC · Nov 3, 2020VulnerabilityCVE-2020-14882CVE-2020-1475060
Another Oracle WebLogic Server RCE under active exploitationHelp Net Security·Jun 19, 00:00 UTC · Jun 19, 2019Vulnerability in the wildCVE-2019-2729CVE-2019-272560
It’s a hot 0-day summer for Apple, Google, and Microsoft security fixesArs Technica · Security·Aug 1, 17:55 UTC · Aug 1, 2023Exploit / PoCCVE-2023-37450CVE-2023-36884CVE-2023-32046+18 CVEs60
Oracle fixes Solaris 10 flaw targeted by leaked NSA exploitHelp Net Security·May 28, 10:21 UTC · May 28, 2020VulnerabilityCVE-2017-3623CVE-2017-3622CVE-2017-563860
Oracle critical patch advisory addresses 284 flaws, 33 criticalSecurity Affairs·Jan 18, 13:15 UTC · Jan 18, 2019VulnerabilityCVE-2016-1000031CVE-2017-5645CVE-2018-11776+3 CVEs60
Oracle fixes 252 vulnerabilities in October 2017 Critical Patch UpdateHelp Net Security·May 28, 10:21 UTC · May 28, 2020VulnerabilityCVE-2017-10402CVE-2017-10405CVE-2017-1040460