Known vulnerabilities in Oracle Database Server 18c - page 2

Vendor: Oracle
Software: Oracle Database Server
Version: 18c
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 8
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Database Server version 18c Oracle Database Server 18c is affected by 93 vulnerabilities: 11 high, 44 medium, 38 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49734 - Improper input validation
CVE-2021-1993		 CWE-20 Medium
No
No
 - 19.01.2021 SB2021011912
#VU49735 - Improper input validation
CVE-2021-2045		 CWE-20 Low
No
No
 - 19.01.2021 SB2021011912
#VU49736 - Improper input validation
CVE-2021-2000		 CWE-20 Low
No
No
 - 19.01.2021 SB2021011912
#VU47766 - Improper input validation
CVE-2020-14743		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47767 - Improper input validation
CVE-2020-14740		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47768 - Improper input validation
CVE-2020-14742		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47761 - Improper input validation
CVE-2020-14735		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47762 - Improper input validation
CVE-2020-14734		 CWE-20 High
No
No
 - 21.10.2020 SB2020102104
#VU33710 - Improper input validation
CVE-2018-3259		 CWE-20 High
No
No
 - 04.08.2020 SB2018101616
#VU29919 - Improper input validation
CVE-2020-2978		 CWE-20 Low
Public exploit available
No
 - 15.07.2020 SB2020071520
#VU29909 - Improper input validation
CVE-2020-2969		 CWE-20 Medium
No
No
 - 15.07.2020 SB2020071520
#VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13935		 CWE-835 Medium
Public exploit available
No
 - 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 14 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Public exploit available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25546 - Heap-based Buffer Overflow
CVE-2020-8112		 CWE-122 Medium
No
No
 - 24.02.2020 SB2020011450
SB2020022412
SB2020022413
and 20 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 - 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more
#VU16185 - Heap-based Buffer Overflow
CVE-2018-18314		 CWE-122 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 10 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 - 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 29 more


Showing elements 21 - 40 out of 93