Oracle Platform Security For Java vulnerabilities

14 CVEs affecting Oracle Platform Security For Java, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61246, published 2026-07-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-2302, published 2021-04-22. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily…
CVE-2016-8281, published 2016-10-25. High severity, CVSS 7.6. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect…
CVE-2016-5536, published 2016-10-25. High severity, CVSS 7.6. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect…
CVE-2026-60366, published 2026-07-22. Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60372, published 2026-07-22. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60367, published 2026-07-22. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60368, published 2026-07-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60369, published 2026-07-22. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-61246, published 2026-07-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60439, published 2026-07-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …

Latest

CVE-2026-60455, published 2026-07-22. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60373, published 2026-07-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60371, published 2026-07-22. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …
CVE-2026-60370, published 2026-07-22. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and …