Known vulnerabilities in Oracle Database Server

Vendor: Oracle
Software: Oracle Database Server
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 236
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Database Server Oracle Database Server is affected by 236 known vulnerabilities: 1 critical, 26 high, 115 medium, 94 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133406 - Improper input validation
CVE-2026-46833		 CWE-20 High
No
No
 - 05.06.2026 SB2026060514
#VU133407 - Improper input validation
CVE-2026-46834		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060514
#VU133408 - Improper input validation
CVE-2026-46835		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060514
#VU126713 - Improper input validation
CVE-2026-35229		 CWE-20 Medium
No
No
 19.4 21.04.2026 SB2026042193
#VU126714 - Improper input validation
CVE-2026-21999		 CWE-20 Medium
No
No
 - 21.04.2026 SB2026042193
#VU126715 - Improper input validation
CVE-2026-34312		 CWE-20 Low
No
No
 19.4 21.04.2026 SB2026042193
#VU125562 - Unchecked Return Value
CVE-2026-31790		 CWE-252 Medium
No
No
 19.4 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 - 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 31 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 19.4 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 23 more
#VU118868 - Improper input validation
CVE-2025-31948		 CWE-20 Low
No
No
 19.4 01.12.2025 SB2025120144
SB2026042193
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU121780 - Improper input validation
CVE-2025-30751		 CWE-20 High
No
No
 23.9.0 29.07.2025 SB2025072995
#VU121781 - Improper input validation
CVE-2025-50069		 CWE-20 Medium
No
No
 19.28, 21.19 29.07.2025 SB2025072995
#VU121782 - Improper input validation
CVE-2025-50070		 CWE-20 Low
No
No
 23.9.0 29.07.2025 SB2025072995
#VU121783 - Improper input validation
CVE-2025-50066		 CWE-20 Low
No
No
 19.28, 21.19, 23.9.0 29.07.2025 SB2025072995
#VU121784 - Improper input validation
CVE-2025-30750		 CWE-20 Low
No
No
 19.28, 21.19, 23.9.0 29.07.2025 SB2025072995
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 19.28, 21.19, 23.9.0 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU121799 - Improper input validation
CVE-2019-2406		 CWE-20 Medium
No
No
 - 24.12.2024 SB20190115117
#VU121800 - Improper input validation
CVE-2019-2547		 CWE-20 Low
No
No
 - 24.12.2024 SB20190115117
#VU65640 - Improper input validation
CVE-2019-2444		 CWE-20 Low
No
No
 - 21.07.2022 SB2022072117
SB20190115117


Showing elements 1 - 20 out of 236