FEDRAMP CATALOG › Oracle Cloud Infrastructure-Government Cloud

Oracle Cloud Infrastructure-Government Cloud

Oracle · package FR1900048743

Current status Authorized · High impact · since 2026-07-07 Service modelIaaS, PaaS MarketplaceRev5 · source: marketplace Security posture 33 critical 33 high 46 on KEV · 66 correlated CVEs

CMMC DOMAINS ADDRESSED

SC · System and Communications Protection IA · Identification and Authentication CM · Configuration Management MP · Media Protection

STATUS TIMELINE · SCD2

STATUS	IMPACT	FROM	TO
Authorized	High	2026-07-07	current

AUTHORIZATIONS

AGENCY	TYPE	DATE
JAB Authorization	JAB	2020-10-01

EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures

SEVERITY	CVE	TITLE	PUBLISHED
HIGH	CVE-2026-21962	Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability	2026-08-24
CRITICAL	CVE-2026-60977	CVE-2026-60977: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware	2026-08-18
CRITICAL	CVE-2026-60990	CVE-2026-60990: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion	2026-08-18
CRITICAL	CVE-2026-61001	CVE-2026-61001: Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middle	2026-08-18
CRITICAL	CVE-2026-61003	CVE-2026-61003: Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl	2026-08-18
CRITICAL	CVE-2026-61066	CVE-2026-61066: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware	2026-08-18
CRITICAL	CVE-2026-61241	CVE-2026-61241: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa	2026-08-18
CRITICAL	CVE-2026-61248	CVE-2026-61248: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa	2026-08-18
CRITICAL	CVE-2026-61258	CVE-2026-61258: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa	2026-08-18
CRITICAL	CVE-2026-70905	CVE-2026-70905: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (	2026-08-18
HIGH	CVE-2026-46817	Oracle E-Business Suite Improper Privilege Management Vulnerability	2026-07-15
CRITICAL	CVE-2026-35273	Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	2026-06-12
HIGH	CVE-2024-21182	Oracle WebLogic Server Unspecified Vulnerability	2026-06-01
HIGH	CVE-2025-61757	Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability	2025-11-21
CRITICAL	CVE-2025-61884	Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability	2025-10-20
CRITICAL	CVE-2025-61882	Oracle E-Business Suite Unspecified Vulnerability	2025-10-06
HIGH	CVE-2024-20953	Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability	2025-02-24
HIGH	CVE-2020-2883	Oracle WebLogic Server Unspecified Vulnerability	2025-01-07
HIGH	CVE-2024-21287	Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability	2024-11-21
HIGH	CVE-2020-14644	Oracle WebLogic Server Remote Code Execution Vulnerability	2024-09-18
HIGH	CVE-2022-21445	Oracle ADF Faces Deserialization of Untrusted Data Vulnerability	2024-09-18
HIGH	CVE-2017-3506	Oracle WebLogic Server OS Command Injection Vulnerability	2024-06-03
HIGH	CVE-2020-2551	Oracle Fusion Middleware Unspecified Vulnerability	2023-11-16
HIGH	CVE-2016-3427	Oracle Java SE and JRockit Unspecified Vulnerability	2023-05-12
HIGH	CVE-2023-21839	Oracle WebLogic Server Unspecified Vulnerability	2023-05-01
CRITICAL	CVE-2022-21587	Oracle E-Business Suite Unspecified Vulnerability	2023-02-02
HIGH	CVE-2021-35587	Oracle Fusion Middleware Unspecified Vulnerability	2022-11-28
HIGH	CVE-2018-2628	Oracle WebLogic Server Unspecified Vulnerability	2022-09-08
HIGH	CVE-2010-0840	Oracle JRE Unspecified Vulnerability	2022-05-25
CRITICAL	CVE-2012-1710	Oracle Fusion Middleware Unspecified Vulnerability	2022-05-25
CRITICAL	CVE-2013-0422	Oracle JRE Remote Code Execution Vulnerability	2022-05-25
CRITICAL	CVE-2013-0431	Oracle JRE Sandbox Bypass Vulnerability	2022-05-25
HIGH	CVE-2013-2423	Oracle JRE Unspecified Vulnerability	2022-05-25
HIGH	CVE-2019-3010	Oracle Solaris Privilege Escalation Vulnerability	2022-05-25
HIGH	CVE-2012-0518	Oracle Fusion Middleware Unspecified Vulnerability	2022-03-28
HIGH	CVE-2012-5076	Oracle Java SE Sandbox Bypass Vulnerability	2022-03-28
CRITICAL	CVE-2013-2465	Oracle Java SE Unspecified Vulnerability	2022-03-28
HIGH	CVE-2019-2616	Oracle BI Publisher Unauthorized Access Vulnerability	2022-03-25
HIGH	CVE-2008-3431	Oracle VirtualBox Insufficient Input Validation Vulnerability	2022-03-03
HIGH	CVE-2011-3544	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability	2022-03-03
CRITICAL	CVE-2012-0507	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability	2022-03-03
CRITICAL	CVE-2012-1723	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability	2022-03-03
CRITICAL	CVE-2012-4681	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability	2022-03-03
HIGH	CVE-2015-2590	Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability	2022-03-03
HIGH	CVE-2015-4902	Oracle Java SE Integrity Check Vulnerability	2022-03-03
CRITICAL	CVE-2017-10271	Oracle Corporation WebLogic Server Remote Code Execution Vulnerability	2022-02-10
HIGH	CVE-2020-14864	Oracle Business Intelligence Enterprise Edition Path Transversal	2022-01-18
CRITICAL	CVE-2019-2725	Oracle WebLogic Server, Injection	2022-01-10
HIGH	CVE-2012-3152	Oracle Fusion Middleware Unspecified Vulnerability	2021-11-03
HIGH	CVE-2015-4852	Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability	2021-11-03
HIGH	CVE-2020-14750	Oracle WebLogic Server Remote Code Execution Vulnerability	2021-11-03
HIGH	CVE-2020-14871	Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability	2021-11-03
HIGH	CVE-2020-14882	Oracle WebLogic Server Remote Code Execution Vulnerability	2021-11-03
HIGH	CVE-2020-14883	Oracle WebLogic Server Unspecified Vulnerability	2021-11-03
HIGH	CVE-2020-2555	Oracle Multiple Products Remote Code Execution Vulnerability	2021-11-03
CRITICAL	CVE-2021-40438	CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig	2021-09-16
CRITICAL	CVE-2020-10683	CVE-2020-10683: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Enti	2020-05-01
CRITICAL	CVE-2020-9546	CVE-2020-9546: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee	2020-03-02
CRITICAL	CVE-2020-9548	CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee	2020-03-02
CRITICAL	CVE-2020-1938	CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc	2020-02-24
CRITICAL	CVE-2019-2725	CVE-2019-2725: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar	2019-04-26
CRITICAL	CVE-2018-1273	CVE-2018-1273: Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older	2018-04-11
CRITICAL	CVE-2016-9841	CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif	2017-05-23
CRITICAL	CVE-2016-8735	CVE-2016-8735: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7	2017-04-06
CRITICAL	CVE-2012-4681	CVE-2012-4681: Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Orac	2012-08-28
CRITICAL	CVE-2012-1710	CVE-2012-1710: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in	2012-05-03