Known vulnerabilities in Oracle Database Server 19c

Vendor: Oracle
Software: Oracle Database Server
Version: 19c
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 146
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Database Server version 19c Oracle Database Server 19c is affected by 146 vulnerabilities: 14 high, 73 medium, 59 low Critical High Medium Low

Vulnerabilities (146)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103146 - Improper input validation
CVE-2025-21553		 CWE-20 Low
No
No
 23.7 21.01.2025 SB2025012173
#VU98600 - Improper input validation
CVE-2024-21233		 CWE-20 Low
No
No
 23.6 15.10.2024 SB20241015116
#VU98601 - Improper input validation
CVE-2024-21242		 CWE-20 Low
No
No
 23.6 15.10.2024 SB20241015116
#VU98602 - Improper input validation
CVE-2024-21251		 CWE-20 Low
No
No
 23.6 15.10.2024 SB20241015116
#VU95131 - Out-of-bounds read
CVE-2024-7264		 CWE-125 Medium
No
No
 23.6 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU94532 - Improper input validation
CVE-2024-21126		 CWE-20 Medium
No
No
 - 18.07.2024 SB2024071850
#VU94534 - Improper input validation
CVE-2024-21174		 CWE-20 Low
No
No
 - 18.07.2024 SB2024071850
#VU94535 - Improper input validation
CVE-2024-21123		 CWE-20 Low
No
No
 - 18.07.2024 SB2024071850
#VU94531 - Improper input validation
CVE-2024-21184		 CWE-20 Medium
No
No
 - 18.07.2024 SB2024071850
#VU88569 - Improper input validation
CVE-2024-21093		 CWE-20 Medium
No
No
 - 16.04.2024 SB2024041638
#VU88570 - Improper input validation
CVE-2024-21058		 CWE-20 Medium
No
No
 - 16.04.2024 SB2024041638
#VU88571 - Improper input validation
CVE-2024-21066		 CWE-20 Low
No
No
 - 16.04.2024 SB2024041638
#VU88573 - Improper input validation
CVE-2024-20995		 CWE-20 Low
No
No
 - 16.04.2024 SB2024041638
#VU85453 - Improper input validation
CVE-2024-20903		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011655
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Public exploit available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Public exploit available
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU78389 - Improper input validation
CVE-2023-22034		 CWE-20 Medium
No
No
 - 19.07.2023 SB2023071932
#VU78390 - Improper input validation
CVE-2023-21949		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071932
SB2024011669
#VU78391 - Improper input validation
CVE-2023-22052		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071932
#VU73236 - Untrusted Search Path
CVE-2022-26345		 CWE-426 Low
No
No
 - 10.03.2023 SB2023031031
SB2025012173


Showing elements 1 - 20 out of 146