Known vulnerabilities in Oracle Database Server 18c - page 2

Vendor: Oracle
Software: Oracle Database Server
Version: 18c
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Database Server version 18c Oracle Database Server 18c is affected by 93 vulnerabilities: 11 high, 44 medium, 38 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47768 - Improper input validation
CVE-2020-14742		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU29919 - Improper input validation
CVE-2020-2978		 CWE-20 Low
Public exploit available
No
 - 15.07.2020 SB2020071520
#VU29909 - Improper input validation
CVE-2020-2969		 CWE-20 Medium
No
No
 - 15.07.2020 SB2020071520
#VU29908 - Improper input validation
CVE-2020-2968		 CWE-20 High
No
No
 - 15.07.2020 SB2020071520
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Public exploit available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU26905 - Improper input validation
CVE-2020-2735		 CWE-20 High
No
No
 - 15.04.2020 SB2020041701
#VU26907 - Improper input validation
CVE-2020-2737		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
#VU26908 - Improper input validation
CVE-2019-2853		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
SB2019071656
#VU26910 - Improper input validation
CVE-2020-2734		 CWE-20 Low
No
No
 - 15.04.2020 SB2020041701
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25546 - Heap-based Buffer Overflow
CVE-2020-8112		 CWE-122 Medium
No
No
 - 24.02.2020 SB2020011450
SB2020022412
SB2020022413
and 20 more
#VU25002 - Session Fixation
CVE-2019-17563		 CWE-384 Low
No
No
 - 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU24416 - Improper input validation
CVE-2020-2511		 CWE-20 Medium
No
No
 - 20.01.2020 SB2020012015
#VU24417 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-2510		 CWE-89 Medium
No
No
 - 20.01.2020 SB2020012015
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU20992 - Resource Management Errors
CVE-2019-10072		 CWE-399 Medium
No
No
 - 10.09.2019 SB2019091025
SB2019112011
SB2019112012
and 14 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU16185 - Heap-based Buffer Overflow
CVE-2018-18314		 CWE-122 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 10 more
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more
#VU6666 - Out-of-bounds read
CVE-2016-9843		 CWE-125 Low
No
No
 - 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 29 more


Showing elements 21 - 40 out of 93