| 2020-03-21 | Oracle E-Business Suite Default credentials vulnerability | Published |
| 2020-01-09 | Oracle Weblogic 10.3.6.0.0 Remote Command Execution | Published |
| 2019-12-10 | Oracle Siebel Sales 8.1 Persistent Cross-Site Scripting | Published |
| 2019-09-19 | Oracle Mojarra JSF / Eclipse Mojarra JSF 2.2 / 2.3 Cross Site Scripting | Published |
| 2019-07-31 | Oracle Hyperion Planning 11.1.2.3 XML External Entity | Published |
| 2019-07-18 | Oracle Siebel CRM 19.0 Cross Site Scripting | Published |
| 2019-07-11 | Oracle Support Platform Service XSS Vulnerability | Published |
| 2019-05-30 | Oracle Application Testing Suite WebLogic Server Administration Console War Deployment Metasploit | Published |
| 2019-05-29 | Oracle Application Testing Suite WebLogic Server Administration Console War Deployment | Published |
| 2019-04-21 | Oracle Business Intelligence Directory Traversal | Published |
| 2019-04-21 | Oracle Business Intelligence And XML Publisher XML Injection | Published |
| 2019-04-02 | Oracle Weblogic Server Deserialization MarshalledObject Remote Code Execution | Published |
| 2019-03-09 | Oracle Weblogic Server Deserialization Remote Command Execution | Published |
| 2019-02-18 | Oracle Java Runtime Environment Heap Out-of-Bounds Read During TTF Font Rendering | Published |
| 2019-02-16 | Navicat For Oracle 12.1.15 Denial Of Service | Published |
| 2019-01-18 | Oracle Reports Developer 12.2.1.3 Cross Site Scripting | Published |
| 2018-11-26 | Oracle Secure Global Desktop Administration Console 4.4 Cross Site Scripting | Published |
| 2018-10-27 | Oracle Hyperion Planning 11.1.2.4 Cross Site Scripting | Published |
| 2018-10-23 | Oracle Siebel CRM 8.1.1 CSV Injection | Published |
| 2018-10-05 | Oracle Solaris Bind/Postinstall script for Bind package local root | Published |
| 2018-09-17 | Oracle VirtualBox Manager 5.2.18 r124319 Name Attribute Denial of Service | Published |
| 2018-08-14 | Oracle Weblogic Server Deserialization RCE Metasploit | Published |
| 2018-08-14 | Oracle GlassFish Server 4.1 Directory Traversal | Published |
| 2018-08-11 | Oracle Weblogic Server Deserialization Remote Code Execution | Published |
| 2018-07-24 | Oracle WebLogic Server 12.2.1.3. Takeover server exploit | Published |
| 2018-07-21 | Oracle Fusion Middleware 12c 12.2.1.3.0 WebLogic SAML Issues | Published |
| 2018-05-03 | Navicat < 12.0.27 Oracle Connection Overflow | Published |
| 2018-04-29 | Oracle Weblogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.2 / 12.2.1.3 Deserialization Remote Command Exec | Published |
| 2018-02-18 | Oracle Primavera P6 Enterprise Project Portfolio Management HTTP Response Splitting | Published |
| 2018-02-05 | Oracle Hospitality Simphony MICROS 2.9 Directory Traversal | Published |
| 2018-01-30 | Oracle WebLogic wls-wsat Component Deserialization Remote Code Execution | Published |
| 2018-01-25 | Oracle VirtualBox Guest To Host Escape | Published |
| 2018-01-24 | Oracle Financial Services Analytical Applications 7.3.5.x / 8.0.x XXE Injection / XSS | Published |
| 2018-01-18 | Oracle JDeveloper / Directory Traversal CVE-2017-10273 | Published |
| 2018-01-16 | Oracle E-Business Suite 12.1.3 / 12.2.x Open Redirect | Published |
| 2018-01-08 | Oracle WebLogic < 10.3.6 wls-wsat Component Deserialisation Remote Command Execution | Published |
| 2017-12-22 | Oracle MySQL UDF Payload Execution | Published |
| 2017-11-04 | Oracle PeopleSoft Enterprise PeopleTools Remote Code Execution | Published |
| 2017-11-03 | Oracle Java SE Wv8u131 Information Disclosure | Published |