WaratekVRT Sign in

8,653 Java CVEs fixed by Oracle since January 2010. 3,950 in the last 12 months.

Attackers have used 111 Oracle Java CVEs since 2010.

Public code or exploit: a published code fix, a proof of concept or reported exploitation Oracle advisory

Oracle advisory. These CVEs are in proprietary Oracle products and are fixed by Oracle's patches. Oracle's security advisory is the source of public detail for them: product, component and CVSS score. In the table they show as No exploit published.

Waratek rule. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

1,0002,0003,0002010: 116 Java CVEs first fixed. 9 with public code or exploit, 107 with Oracle's advisory as the source of detail. 0 exploited, 0 with a Waratek rule.2010002011: 132 Java CVEs first fixed. 14 with public code or exploit, 118 with Oracle's advisory as the source of detail. 0 exploited, 2 with a Waratek rule.022012: 214 Java CVEs first fixed. 16 with public code or exploit, 198 with Oracle's advisory as the source of detail. 4 exploited, 2 with a Waratek rule.2012422013: 218 Java CVEs first fixed. 26 with public code or exploit, 192 with Oracle's advisory as the source of detail. 4 exploited, 11 with a Waratek rule.4112014: 186 Java CVEs first fixed. 23 with public code or exploit, 163 with Oracle's advisory as the source of detail. 1 exploited, 7 with a Waratek rule.2014172015: 222 Java CVEs first fixed. 23 with public code or exploit, 199 with Oracle's advisory as the source of detail. 0 exploited, 12 with a Waratek rule.0122016: 410 Java CVEs first fixed. 39 with public code or exploit, 371 with Oracle's advisory as the source of detail. 6 exploited, 28 with a Waratek rule.20166282017: 464 Java CVEs first fixed. 60 with public code or exploit, 404 with Oracle's advisory as the source of detail. 5 exploited, 44 with a Waratek rule.5442018: 407 Java CVEs first fixed. 55 with public code or exploit, 352 with Oracle's advisory as the source of detail. 5 exploited, 50 with a Waratek rule.20185502019: 323 Java CVEs first fixed. 65 with public code or exploit, 258 with Oracle's advisory as the source of detail. 9 exploited, 45 with a Waratek rule.9452020: 542 Java CVEs first fixed. 80 with public code or exploit, 462 with Oracle's advisory as the source of detail. 9 exploited, 53 with a Waratek rule.20209532021: 357 Java CVEs first fixed. 84 with public code or exploit, 273 with Oracle's advisory as the source of detail. 6 exploited, 40 with a Waratek rule.6402022: 287 Java CVEs first fixed. 115 with public code or exploit, 172 with Oracle's advisory as the source of detail. 18 exploited, 52 with a Waratek rule.202218522023: 291 Java CVEs first fixed. 150 with public code or exploit, 141 with Oracle's advisory as the source of detail. 9 exploited, 44 with a Waratek rule.9442024: 298 Java CVEs first fixed. 110 with public code or exploit, 188 with Oracle's advisory as the source of detail. 14 exploited, 29 with a Waratek rule.202414292025: 236 Java CVEs first fixed. 101 with public code or exploit, 135 with Oracle's advisory as the source of detail. 13 exploited, 24 with a Waratek rule.13242026: 3,950 Java CVEs first fixed. 329 with public code or exploit, 3,621 with Oracle's advisory as the source of detail. 8 exploited, 34 with a Waratek rule.2026834ExploitedWaratek rule1,0002,0003,0002010: 116 Java CVEs first fixed. 9 with public code or exploit, 107 with Oracle's advisory as the source of detail. 0 exploited, 0 with a Waratek rule.20102011: 132 Java CVEs first fixed. 14 with public code or exploit, 118 with Oracle's advisory as the source of detail. 0 exploited, 2 with a Waratek rule.2012: 214 Java CVEs first fixed. 16 with public code or exploit, 198 with Oracle's advisory as the source of detail. 4 exploited, 2 with a Waratek rule.2013: 218 Java CVEs first fixed. 26 with public code or exploit, 192 with Oracle's advisory as the source of detail. 4 exploited, 11 with a Waratek rule.2014: 186 Java CVEs first fixed. 23 with public code or exploit, 163 with Oracle's advisory as the source of detail. 1 exploited, 7 with a Waratek rule.20142015: 222 Java CVEs first fixed. 23 with public code or exploit, 199 with Oracle's advisory as the source of detail. 0 exploited, 12 with a Waratek rule.2016: 410 Java CVEs first fixed. 39 with public code or exploit, 371 with Oracle's advisory as the source of detail. 6 exploited, 28 with a Waratek rule.2017: 464 Java CVEs first fixed. 60 with public code or exploit, 404 with Oracle's advisory as the source of detail. 5 exploited, 44 with a Waratek rule.2018: 407 Java CVEs first fixed. 55 with public code or exploit, 352 with Oracle's advisory as the source of detail. 5 exploited, 50 with a Waratek rule.20182019: 323 Java CVEs first fixed. 65 with public code or exploit, 258 with Oracle's advisory as the source of detail. 9 exploited, 45 with a Waratek rule.2020: 542 Java CVEs first fixed. 80 with public code or exploit, 462 with Oracle's advisory as the source of detail. 9 exploited, 53 with a Waratek rule.2021: 357 Java CVEs first fixed. 84 with public code or exploit, 273 with Oracle's advisory as the source of detail. 6 exploited, 40 with a Waratek rule.2022: 287 Java CVEs first fixed. 115 with public code or exploit, 172 with Oracle's advisory as the source of detail. 18 exploited, 52 with a Waratek rule.20222023: 291 Java CVEs first fixed. 150 with public code or exploit, 141 with Oracle's advisory as the source of detail. 9 exploited, 44 with a Waratek rule.2024: 298 Java CVEs first fixed. 110 with public code or exploit, 188 with Oracle's advisory as the source of detail. 14 exploited, 29 with a Waratek rule.2025: 236 Java CVEs first fixed. 101 with public code or exploit, 135 with Oracle's advisory as the source of detail. 13 exploited, 24 with a Waratek rule.2026: 3,950 Java CVEs first fixed. 329 with public code or exploit, 3,621 with Oracle's advisory as the source of detail. 8 exploited, 34 with a Waratek rule.2026
ReleasesThe last 24 months. Pick a release to see all of its Java CVEs.
ReleaseJava CVEscriticalhighmediumlowCriticalMost affected familiesExploitedWaratek rule
October 2026Critical Patch Update 1,131 94 Fusion Middleware 244 · E-Business Suite 197 · Communications 170 5 21
September 2026Security Patch Update 639 97 E-Business Suite 160 · Fusion Middleware 156 · Hyperion 107 0 6
August 2026Security Patch Update 911 154 Fusion Middleware 300 · Hyperion 267 · E-Business Suite 122 8 14
July 2026Critical Patch Update 1,122 224 E-Business Suite 413 · Fusion Middleware 396 · Communications 118 4 21
June 2026Security Patch Update 229 119 Fusion Middleware 113 · E-Business Suite 56 · Enterprise Manager 21 1 1
May 2026Security Patch Update 37 11 Communications 14 · E-Business Suite 12 · REST Data Services 12 3 3
April 2026Critical Patch Update 172 21 Communications 82 · Fusion Middleware 72 · Financial Services Applications 53 5 16
January 2026Critical Patch Update 75 10 Fusion Middleware 30 · Financial Services Applications 29 · Communications 28 3 15
October 2025Critical Patch Update 95 7 Fusion Middleware 40 · Communications 38 · Financial Services Applications 37 5 13
July 2025Critical Patch Update 86 5 Fusion Middleware 41 · Communications Applications 37 · Communications 34 4 16
April 2025Critical Patch Update 118 12 Communications 55 · Fusion Middleware 49 · Communications Applications 39 6 22
January 2025Critical Patch Update 103 11 Fusion Middleware 38 · Communications 37 · Financial Services Applications 30 6 13
71 older releases
October 2024Critical Patch Update 106 7 Fusion Middleware 45 · Communications 40 · Financial Services Applications 30 4 15
July 2024Critical Patch Update 116 12 Fusion Middleware 71 · Communications 58 · Financial Services Applications 45 6 16
April 2024Critical Patch Update 163 16 Communications 59 · Fusion Middleware 58 · E-Business Suite 47 6 20
January 2024Critical Patch Update 132 13 Communications 67 · Fusion Middleware 56 · Financial Services Applications 48 8 27
October 2023Critical Patch Update 105 15 Fusion Middleware 57 · Financial Services Applications 50 · Communications 49 2 15
July 2023Critical Patch Update 155 29 Fusion Middleware 83 · Communications 78 · Financial Services Applications 66 10 45
April 2023Critical Patch Update 175 20 Fusion Middleware 83 · Financial Services Applications 79 · Communications 75 8 47
January 2023Critical Patch Update 95 19 Fusion Middleware 54 · Communications 44 · Communications Applications 42 8 29
October 2022Critical Patch Update 84 12 Fusion Middleware 46 · Communications 35 · Communications Applications 31 6 25
July 2022Critical Patch Update 105 18 Financial Services Applications 53 · Fusion Middleware 49 · Communications Applications 40 9 27
April 2022Critical Patch Update 111 10 Communications 62 · Fusion Middleware 53 · Communications Applications 43 9 26
January 2022Critical Patch Update 137 15 Fusion Middleware 54 · Communications 53 · Communications Applications 42 9 34
October 2021Critical Patch Update 101 11 Communications 41 · Fusion Middleware 39 · Communications Applications 27 1 26
July 2021Critical Patch Update 119 16 Fusion Middleware 46 · Communications 33 · Financial Services Applications 29 3 27
April 2021Critical Patch Update 137 18 E-Business Suite 70 · Fusion Middleware 38 · Financial Services Applications 27 3 19
January 2021Critical Patch Update 106 20 Fusion Middleware 45 · E-Business Suite 32 · Financial Services Applications 25 4 25
October 2020Critical Patch Update 119 25 Fusion Middleware 40 · E-Business Suite 27 · Financial Services Applications 25 7 24
July 2020Critical Patch Update 170 27 Fusion Middleware 63 · Financial Services Applications 38 · Communications Applications 35 6 30
April 2020Critical Patch Update 183 21 E-Business Suite 76 · Fusion Middleware 39 · Financial Services Applications 36 2 26
January 2020Critical Patch Update 168 17 Enterprise Manager 48 · Financial Services Applications 41 · Fusion Middleware 38 5 28
October 2019Critical Patch Update 86 8 Fusion Middleware 24 · Retail Applications 17 · Financial Services Applications 13 1 23
July 2019Critical Patch Update 91 12 Financial Services Applications 28 · Fusion Middleware 23 · Retail Applications 21 7 25
April 2019Critical Patch Update 106 16 Fusion Middleware 35 · E-Business Suite 34 · Retail Applications 18 4 20
January 2019Critical Patch Update 83 11 Fusion Middleware 21 · PeopleSoft Products 20 · E-Business Suite 18 1 13
October 2018Critical Patch Update 105 15 Fusion Middleware 32 · PeopleSoft Products 24 · E-Business Suite 17 2 22
July 2018Critical Patch Update 142 13 Financial Services Applications 54 · Fusion Middleware 26 · Retail Applications 16 4 16
April 2018Critical Patch Update 76 11 Fusion Middleware 19 · Financial Services Applications 15 · Retail Applications 14 3 20
January 2018Critical Patch Update 111 5 Financial Services Applications 37 · Fusion Middleware 17 · PeopleSoft Products 13 2 16
October 2017Critical Patch Update 119 12 Fusion Middleware 29 · E-Business Suite 26 · PeopleSoft Products 23 4 15
July 2017Critical Patch Update 149 8 Fusion Middleware 29 · PeopleSoft Products 29 · Financial Services Applications 23 2 15
April 2017Critical Patch Update 113 9 Financial Services Applications 32 · Fusion Middleware 32 · PeopleSoft Products 16 5 17
January 2017Critical Patch Update 101 7 Financial Services Applications 36 · E-Business Suite 32 · Fusion Middleware 10 1 12
October 2016Critical Patch Update 96 5 Fusion Middleware 21 · E-Business Suite 20 · Financial Services Applications 16 2 7
July 2016Critical Patch Update 113 14 Supply Chain Products Suite 25 · E-Business Suite 23 · Fusion Middleware 18 2 4
April 2016Critical Patch Update 50 5 PeopleSoft Products 14 · Fusion Middleware 11 · E-Business Suite 7 3 5
January 2016Critical Patch Update 161 0 E-Business Suite 77 · Enterprise Manager Grid Control 28 · Fusion Middleware 21 2 19
October 2015Critical Patch Update 55 0 Fusion Middleware 18 · E-Business Suite 12 · PeopleSoft Products 7 0 8
July 2015Critical Patch Update 67 1 Fusion Middleware 25 · E-Business Suite 12 · Supply Chain Products Suite 7 1 5
April 2015Critical Patch Update 34 0 Fusion Middleware 7 · PeopleSoft Products 6 · Supply Chain Products Suite 6 0 0
January 2015Critical Patch Update 72 0 Fusion Middleware 23 · Siebel CRM 18 · E-Business Suite 10 1 2
October 2014Critical Patch Update 40 0 Fusion Middleware 12 · E-Business Suite 10 · PeopleSoft Products 5 1 4
July 2014Critical Patch Update 50 0 Fusion Middleware 23 · Hyperion 7 · Siebel CRM 7 1 2
April 2014Critical Patch Update 46 0 Fusion Middleware 19 · Supply Chain Products Suite 10 · PeopleSoft Products 8 0 1
January 2014Critical Patch Update 51 0 PeopleSoft Products 17 · Supply Chain Products Suite 13 · Fusion Middleware 10 0 1
October 2013Critical Patch Update 56 1 Fusion Middleware 12 · Java SE 10 · Siebel CRM 9 2 8
July 2013Critical Patch Update 35 0 PeopleSoft Products 10 · Fusion Middleware 9 · E-Business Suite 7 2 1
June 2013Java SE Critical Patch Update 4 0 Java SE 4 · Fusion Middleware 1 1 2
April 2013Java SE Critical Patch Update 2 0 Java SE 2 0 1
April 2013Critical Patch Update 69 0 Financial Services Software 18 · Fusion Middleware 17 · PeopleSoft Products 11 0 0
February 2013Java SE Critical Patch Update 3 0 Java SE 3 0 0
January 2013Critical Patch Update 50 0 Enterprise Manager Grid Control 13 · PeopleSoft Products 12 · Siebel CRM 10 0 0
October 2012Java SE Critical Patch Update 1 0 Java SE 1 0 0
October 2012Critical Patch Update 68 1 Fusion Middleware 24 · Financial Services Software 13 · E-Business Suite 9 3 2
July 2012Critical Patch Update 46 0 Fusion Middleware 17 · PeopleSoft Products 9 · Siebel CRM 7 0 0
June 2012Java SE Critical Patch Update 5 0 Java SE 5 · Sun Products Suite 1 0 0
April 2012Critical Patch Update 57 1 Financial Services Software 17 · PeopleSoft Products 15 · Fusion Middleware 11 1 0
February 2012Java SE Critical Patch Update 5 0 Java SE 5 0 0
January 2012Critical Patch Update 33 0 Fusion Middleware 9 · JD Edwards Products 8 · Sun Products Suite 7 0 0
October 2011Java SE Critical Patch Update 4 0 JDK, JRE and JRockit 4 0 1
October 2011Critical Patch Update 28 0 Fusion Middleware 9 · PeopleSoft Products 7 · E-Business Suite 5 0 0
July 2011Critical Patch Update 20 0 PeopleSoft Products 12 · Fusion Middleware 5 · E-Business Suite 1 0 0
June 2011Java SE Critical Patch Update 6 0 Java SE 6 · Fusion Middleware 1 0 0
April 2011Critical Patch Update 38 0 PeopleSoft Products 14 · JD Edwards Products 8 · Fusion Middleware 5 0 0
February 2011Java SE Critical Patch Update 7 0 Java SE and Java for Business 7 · Sun Products Suite 1 0 0
January 2011Critical Patch Update 31 0 Fusion Middleware 11 · PeopleSoft and JDEdwards Suite 11 · Supply Chain Products Suite 3 0 1
October 2010Java SE Critical Patch Update 5 0 Java SE and Java for Business 5 0 0
October 2010Critical Patch Update 40 0 PeopleSoft and JDEdwards Suite 21 · Fusion Middleware 7 · E-Business Suite 6 0 0
July 2010Critical Patch Update 25 0 PeopleSoft and JDEdwards Suite 8 · E-Business Suite 7 · Fusion Middleware 6 0 0
April 2010Critical Patch Update 23 0 E-Business Suite 8 · Industry Applications 6 · Fusion Middleware 4 0 0
March 2010Java SE Critical Patch Update 12 0 Java SE and Java for Business 12 · Fusion Middleware 1 0 0
January 2010Critical Patch Update 12 0 BEA Product Suite 5 · E-Business Suite 3 · Application Server 2 0 0
Product familiesJava CVEs Oracle has fixed in each family since 2010.
FamilyJava CVEscriticalhighmediumlowCriticalExploitedWaratek rule
Fusion Middleware 2,138 532 62 177
E-Business Suite 1,913 77 11 19
Financial Services Applications 630 61 26 79
Communications 559 90 28 83
Siebel CRM 522 46 13 40
Hyperion 481 52 7 19
PeopleSoft 451 29 5 20
PeopleSoft Products 381 3 1 5
Java SE 341 9 3 158
Supply Chain 286 39 14 34
Retail Applications 284 47 17 70
Communications Applications 281 55 18 82

All 76 families