Oracle
oracle.com · cloud-infrastructure
Includes: NetSuite
Transparency
Breakdown
| Subprocessor list | not found | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 27 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Oracle's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/oracle"><img src="https://thirdpartyindex.com/badge/oracle.svg" alt="Oracle transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/oracle)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (43)
Purposes as each company states them.
- 8x8 8x8.com Cloud Service Provider; Full stack deployments in various regions, including data processor storage in the same region as the customer is deployed.
Aiven aiven.io
Apolicy apolicy.io Data Storage
Baseten baseten.co Cloud Compute
Brightcove brightcove.com Analytics, Communications
Cloudflare cloudflare.com Cloudflare Developer Platform and Cache Reserve
- Clumio by Commvault clumio.com Applicable for SaaS workloads only; Cloud storage provider In case of cloud storage relevant Oracle entity will be determined depending on the configuration choices made by the Customer. EU affiliate: Oracle EMEA Ltd List of Oracle affiliates: https://www.oracle.com/corporate/oracle-affiliates.html
Commvault Systems commvault.com Applicable for SaaS workloads only; Cloud storage provider In case of cloud storage relevant Oracle entity will be determined depending on the configuration choices made by the Customer. EU affiliate: Oracle EMEA Ltd List of Oracle affiliates: https://www.oracle.com/corporate/oracle-affiliates.html
Daily daily.co Cloud hosting provider
Databricks databricks.com Cloud Service Provider
Daytona daytona.io Cloud Infrastructure
Deepgram deepgram.com A cloud computing platform offering a variety of services such as hosting, storage, computing, and databases, widely used by businesses and individuals for scalable, efficient, and flexible cloud solutions.
Digicert digicert.com Manage enterprise resource planning, marketing automation, payment processing, and customer communications
DigitalOcean digitalocean.com Storage services
DoubleVerify doubleverify.com
Dropbox dropbox.com Billing and Customer Support
Egnyte egnyte.com
GitHub github.com Cloud Hosted Infrastructure
Hasura hasura.io
Infobip infobip.com Provisioning of large language model (LLM) capabilities within Infobip AgentOS platform, enabling autonomous multimodal AI-driven task execution, information retrieval and conversational assistance. Available as a selectable LLM provider*.
Kinsta® kinsta.com Hosting and security
- LinkedIn linkedin.com Cloud-based marketing solutions; DNS
LiveKit livekit.com Data center provider
Lusha lusha.com Database Management; Enterprise Software
Mailgun mailgun.com Database, Infrastructure, Support
Medallia medallia.com Hosting of platform data.; Hosting of platform data. Sense360; Regional hosting in certain locations.; Regional hosting in certain locations. Strikedeck
Meltwater meltwater.com Netsuite- Billing software
MinIO min.io Cloud ERP and accounting platform; processes customer and partner names, email addresses, billing addresses, phone numbers, financial transaction data, and invoice records
Nextiva nextiva.com Accounting and Billing
- PandaDoc pandadoc.com Billing and Accounting
Parsec parsecgaming.com Marketing emails and automation, email and landing page activity tracking, Hosting of gated content
Redis redis.io ERP and financial planning service provider
Rocket.Chat rocket.chat Financial transactions, procurement, supply chain operations
Sinch sinch.com Database, Infrastructure, Support
SpaceXAI x.ai Cloud infrastructure, services, and support
Sysdig sysdig.com Data Storage
Talogy talogy.com 3rd Party Applicant Tracking System (Relationship owned by client)
Tanium tanium.com Hosting and storage services
Tigris Data tigrisdata.com Hosting Provider
Velocity T.K. velocity.tech Cloud Service Provider: Used to support AI-driven capabilities such as language understanding, generative responses, and machine learning analytics, enabling BigPanda to deliver enhanced automation and contextual insights across the platform.
Yubico yubico.com NetSuite ERP
Zoom zoom.us Cloud Service Provider
wiz.io wiz.io
Security record
What public security catalogs list for Oracle, in their words.
Known exploited vulnerabilities
46 vulnerabilities in Oracle's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-21962 | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | evidence |
| CVE-2026-46817 | E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | evidence |
| CVE-2026-35273 | PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability used by ransomware | evidence |
| CVE-2024-21182 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | evidence |
| CVE-2025-61757 | Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | evidence |
| CVE-2025-61884 | E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability used by ransomware | evidence |
| CVE-2025-61882 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability used by ransomware | evidence |
| CVE-2024-20953 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | evidence |
| CVE-2020-2883 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | evidence |
| CVE-2024-21287 | Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | evidence |
36 more
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2020-14644 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | evidence |
| CVE-2022-21445 | ADF Faces | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | evidence |
| CVE-2017-3506 | WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | evidence |
| CVE-2020-2551 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | evidence |
| CVE-2016-3427 | Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | evidence |
| CVE-2023-21839 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | evidence |
| CVE-2022-21587 | E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability used by ransomware | evidence |
| CVE-2021-35587 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | evidence |
| CVE-2018-2628 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | evidence |
| CVE-2010-0840 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | evidence |
| CVE-2012-1710 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability used by ransomware | evidence |
| CVE-2013-0422 | Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability used by ransomware | evidence |
| CVE-2013-0431 | Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability used by ransomware | evidence |
| CVE-2013-2423 | Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | evidence |
| CVE-2019-3010 | Solaris | Oracle Solaris Privilege Escalation Vulnerability | evidence |
| CVE-2012-0518 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | evidence |
| CVE-2012-5076 | Java SE | Oracle Java SE Sandbox Bypass Vulnerability | evidence |
| CVE-2013-2465 | Java SE | Oracle Java SE Unspecified Vulnerability used by ransomware | evidence |
| CVE-2019-2616 | BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | evidence |
| CVE-2008-3431 | VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | evidence |
| CVE-2011-3544 | Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | evidence |
| CVE-2012-0507 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability used by ransomware | evidence |
| CVE-2012-1723 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability used by ransomware | evidence |
| CVE-2012-4681 | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability used by ransomware | evidence |
| CVE-2015-2590 | Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | evidence |
| CVE-2015-4902 | Java SE | Oracle Java SE Integrity Check Vulnerability | evidence |
| CVE-2017-10271 | WebLogic Server | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability used by ransomware | evidence |
| CVE-2020-14864 | Intelligence Enterprise Edition | Oracle Business Intelligence Enterprise Edition Path Transversal | evidence |
| CVE-2019-2725 | WebLogic Server | Oracle WebLogic Server, Injection used by ransomware | evidence |
| CVE-2012-3152 | Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | evidence |
| CVE-2015-4852 | WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | evidence |
| CVE-2020-14750 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | evidence |
| CVE-2020-14871 | Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | evidence |
| CVE-2020-14882 | WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | evidence |
| CVE-2020-14883 | WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | evidence |
| CVE-2020-2555 | Multiple Products | Oracle Multiple Products Remote Code Execution Vulnerability | evidence |
Federal contracts
By funding agency. UEI FKUCYGRK1EQ3 , HE98WLUBNW88 failing
None found.
Prime awards and subawards reported by prime contractors. Purchases through a reseller name the reseller, not the vendor.
Changes
None since tracking began.