Known vulnerabilities in Oracle Database Server

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Total vulnerabilities: 236
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Database Server Oracle Database Server is affected by 236 known vulnerabilities: 1 critical, 26 high, 115 medium, 94 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133406 - Improper input validation
CVE-2026-46833
CWE-20 High
No
No
- 05.06.2026 SB2026060514
#VU133407 - Improper input validation
CVE-2026-46834
CWE-20 Medium
No
No
- 05.06.2026 SB2026060514
#VU133408 - Improper input validation
CVE-2026-46835
CWE-20 Medium
No
No
- 05.06.2026 SB2026060514
#VU126713 - Improper input validation
CVE-2026-35229
CWE-20 Medium
No
No
19.4 21.04.2026 SB2026042193
#VU126714 - Improper input validation
CVE-2026-21999
CWE-20 Medium
No
No
- 21.04.2026 SB2026042193
#VU126715 - Improper input validation
CVE-2026-34312
CWE-20 Low
No
No
19.4 21.04.2026 SB2026042193
#VU125562 - Unchecked Return Value
CVE-2026-31790
CWE-252 Medium
No
No
19.4 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 27 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007
CWE-345 Medium
No
No
- 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 30 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
19.4 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU121706 - Improper input validation
CVE-2026-21975
CWE-20 Low
No
No
21.3 20.01.2026 SB2026012079
#VU118868 - Improper input validation
CVE-2025-31948
CWE-20 Low
No
No
19.4 01.12.2025 SB2025120144
SB2026042193
#VU117485 - Improper input validation
CVE-2025-61755
CWE-20 Low
No
No
- 22.10.2025 SB20251022107
SB2026012079
#VU121774 - Improper input validation
CVE-2025-61881
CWE-20 Medium
No
No
19.29, 21.20, 23.9.1 21.10.2025 SB2026012101
#VU121775 - Improper input validation
CVE-2025-53047
CWE-20 Medium
No
No
19.29, 21.20, 23.9.1 21.10.2025 SB2026012101
#VU121776 - Improper input validation
CVE-2025-53051
CWE-20 Low
No
No
23.9.1 21.10.2025 SB2026012101
#VU121777 - Improper input validation
CVE-2025-61749
CWE-20 Low
No
No
23.9.1 21.10.2025 SB2026012101
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949
CWE-611 High
No
No
23.9.1 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU113802 - Heap-based Buffer Overflow
CVE-2025-54874
CWE-122 High
No
No
- 11.08.2025 SB2025081148
SB2025081159
SB2025081160
and 8 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
- 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Available
No
21.20, 23.9.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more


Showing elements 1 - 20 out of 236