Known vulnerabilities in Oracle Database Server 19c - page 5

Vendor: Oracle
Software: Oracle Database Server
Version: 19c
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 146
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Database Server version 19c Oracle Database Server 19c is affected by 146 vulnerabilities: 14 high, 73 medium, 59 low Critical High Medium Low

Vulnerabilities (146)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47764 - Improper input validation
CVE-2020-14901		 CWE-20 Medium
No
No
 - 21.10.2020 SB2020102104
#VU47766 - Improper input validation
CVE-2020-14743		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47768 - Improper input validation
CVE-2020-14742		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47761 - Improper input validation
CVE-2020-14735		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102104
#VU47762 - Improper input validation
CVE-2020-14734		 CWE-20 High
No
No
 - 21.10.2020 SB2020102104
#VU29919 - Improper input validation
CVE-2020-2978		 CWE-20 Low
Public exploit available
No
 - 15.07.2020 SB2020071520
#VU29909 - Improper input validation
CVE-2020-2969		 CWE-20 Medium
No
No
 - 15.07.2020 SB2020071520
#VU29908 - Improper input validation
CVE-2020-2968		 CWE-20 High
No
No
 - 15.07.2020 SB2020071520
#VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13935		 CWE-835 Medium
Public exploit available
No
 - 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 14 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Public exploit available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU26907 - Improper input validation
CVE-2020-2737		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
#VU26908 - Improper input validation
CVE-2019-2853		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
SB2019071656
#VU26910 - Improper input validation
CVE-2020-2734		 CWE-20 Low
No
No
 - 15.04.2020 SB2020041701
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25002 - Session Fixation
CVE-2019-17563		 CWE-384 Low
No
No
 - 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 - 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more
#VU16185 - Heap-based Buffer Overflow
CVE-2018-18314		 CWE-122 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 10 more
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more


Showing elements 81 - 100 out of 146