Oracle

Security Scorecard

Score

34F

Total CVEs

118

Patch Rate

48%

56 patched

Avg Response

10317d

days to patch

Critical Gaps

4

exploitable, no detection

Severity Breakdown

Critical2
High31
Medium73
Low2

Patch Status

Patched56 (47%)
Partial/Workaround0 (0%)
Unpatched62 (53%)

CVEs (118)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in VulnerabilityCritical10.0-Patched
CVE-2026-21963Oracle VM VirtualBox Privilege EscalationMedium6.0-Patched
CVE-2026-21964MySQL Server Thread Pooling VulnerabilityMedium4.9-Patched
CVE-2026-21966Oracle Hospitality OPERA 5 Property Services Remote Code ExecutionMedium6.1-Patched
CVE-2026-21968MySQL Server Denial of Service VulnerabilityMedium6.5-Patched
CVE-2026-21969Oracle Agile Product Lifecycle Management for Process VulnerabilityCritical9.8-Patched
CVE-2026-21970Oracle Life Sciences Central Designer RCEMedium6.5-Patched
CVE-2026-21971Oracle PeopleSoft Enterprise SCM Purchasing VulnerabilityMedium5.4-Patched
CVE-2026-21972Oracle Configurator Remote Code ExecutionMedium5.3-Patched
CVE-2026-21973FLEXCUBE Investor Servicing Remote Code ExecutionHigh8.1-Patched