Oracle
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 16, 2024 to present
1000
Total CVEs
194
Critical+High
26
Exploited
162
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
162
Critical/High
Risk Level
37/100
low
⚠️ 26 Active Exploits⚡ 21 Zero-Days🆕 1Fresh (<7d)📈 9 in Last 30 Days
Severity Distribution
Critical
32High
162Medium
551Low
73Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
153Age Distribution
Common Weaknesses (CWE)
1
Infoleak
35
2
XSS
19
3
CSRF
13
4
SQL Injection
5
5
Buffer Overflow
4
Most Affected Products
1. Oracle MySQL Server525
2. Oracle JDK217
3. Oracle JRE206
4. Checkmk Checkmk156
5. Oracle VM VirtualBox127
Recent Vulnerabilities
See more →CVE-2026-2586
CVSS 9.1critical
5/19/2026🔧 No Patch
EOL-oracle-apex-26.1
unknown
5/14/2026
CVE-2026-35255
CVSS 6.6medium
5/6/2026🔧 No Patch
CVE-2026-35254
CVSS 6.1medium
5/6/2026🔧 No Patch
CVE-2026-35253
CVSS 4.7medium
5/6/2026🔧 No Patch
CVE-2026-35228
CVSS 8.7high
5/5/2026🔧 No Patch
CVE-2026-35233
CVSS 4.4medium
5/1/2026🔧 No Patch
CVE-2026-21996
CVSS 5.5medium
5/1/2026🔧 No Patch
ZDI-CAN-28806
unknown
ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability
4/28/2026🔧 No Patch
CVE-2026-35251
CVSS 7.5high
4/21/2026🔧 No Patch
Monitor Oracle in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.