FEDRAMP CATALOG › Oracle Service Cloud (DOD)
Oracle Service Cloud (DOD)
Oracle · package F1304012002
Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
18 critical
32 high
45 on KEV
· 50 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Defense | Agency | 2015-08-14 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-46817 | Oracle E-Business Suite Improper Privilege Management Vulnerability |
| CRITICAL | CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability |
| HIGH | CVE-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability |
| HIGH | CVE-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability |
| CRITICAL | CVE-2025-61884 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
| CRITICAL | CVE-2025-61882 | Oracle E-Business Suite Unspecified Vulnerability |
| HIGH | CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability |
| HIGH | CVE-2020-2883 | Oracle WebLogic Server Unspecified Vulnerability |
| HIGH | CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability |
| HIGH | CVE-2020-14644 | Oracle WebLogic Server Remote Code Execution Vulnerability |
| HIGH | CVE-2022-21445 | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2017-3506 | Oracle WebLogic Server OS Command Injection Vulnerability |
| HIGH | CVE-2020-2551 | Oracle Fusion Middleware Unspecified Vulnerability |
| HIGH | CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability |
| HIGH | CVE-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability |
| CRITICAL | CVE-2022-21587 | Oracle E-Business Suite Unspecified Vulnerability |
| HIGH | CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability |
| HIGH | CVE-2018-2628 | Oracle WebLogic Server Unspecified Vulnerability |
| HIGH | CVE-2010-0840 | Oracle JRE Unspecified Vulnerability |
| CRITICAL | CVE-2012-1710 | Oracle Fusion Middleware Unspecified Vulnerability |
| CRITICAL | CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability |
| CRITICAL | CVE-2013-0431 | Oracle JRE Sandbox Bypass Vulnerability |
| HIGH | CVE-2013-2423 | Oracle JRE Unspecified Vulnerability |
| HIGH | CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability |
| HIGH | CVE-2012-0518 | Oracle Fusion Middleware Unspecified Vulnerability |
| HIGH | CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability |
| CRITICAL | CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability |
| HIGH | CVE-2019-2616 | Oracle BI Publisher Unauthorized Access Vulnerability |
| HIGH | CVE-2008-3431 | Oracle VirtualBox Insufficient Input Validation Vulnerability |
| HIGH | CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CRITICAL | CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CRITICAL | CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CRITICAL | CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| HIGH | CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability |
| HIGH | CVE-2015-4902 | Oracle Java SE Integrity Check Vulnerability |
| CRITICAL | CVE-2017-10271 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
| HIGH | CVE-2020-14864 | Oracle Business Intelligence Enterprise Edition Path Transversal |
| CRITICAL | CVE-2019-2725 | Oracle WebLogic Server, Injection |
| HIGH | CVE-2012-3152 | Oracle Fusion Middleware Unspecified Vulnerability |
| HIGH | CVE-2015-4852 | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability |
| HIGH | CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability |
| HIGH | CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability |
| HIGH | CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability |
| HIGH | CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability |
| CRITICAL | CVE-2021-40438 | CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig |
| CRITICAL | CVE-2019-2725 | CVE-2019-2725: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar |
| CRITICAL | CVE-2016-9841 | CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif |
| CRITICAL | CVE-2012-4681 | CVE-2012-4681: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Orac |
| CRITICAL | CVE-2012-1710 | CVE-2012-1710: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in |