Known vulnerabilities in Oracle Database Server 21c - page 3

Vendor: Oracle
Software: Oracle Database Server
Version: 21c
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 68
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Database Server version 21c Oracle Database Server 21c is affected by 68 vulnerabilities: 4 high, 32 medium, 32 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Public exploit available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71244 - Improper Certificate Validation
CVE-2023-21893		 CWE-295 Medium
No
No
 - 17.01.2023 SB2023011742
SB2023063061
#VU71245 - Improper input validation
CVE-2023-21829		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011742
SB20231017120
#VU71246 - Improper input validation
CVE-2022-39429		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011742
#VU71247 - Improper input validation
CVE-2023-21827		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011742
#VU68868 - Improper input validation
CVE-2022-21432		 CWE-20 Low
No
No
 - 01.11.2022 SB2022110114
SB2024011655
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68426 - Improper input validation
CVE-2022-21603		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101868
#VU68428 - Improper input validation
CVE-2022-39419		 CWE-20 Low
No
No
 - 18.10.2022 SB2022101868
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 - 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67710 - Heap-based Buffer Overflow
CVE-2021-45943		 CWE-122 High
No
No
 - 28.09.2022 SB2022092807
SB2022092808
SB2022103105
and 3 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 - 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU65451 - Improper input validation
CVE-2020-35169		 CWE-20 High
No
No
 - 19.07.2022 SB2022072035
SB2022072036
SB2022072037
and 5 more
#VU65454 - Improper input validation
CVE-2022-21565		 CWE-20 Medium
No
No
 - 19.07.2022 SB2022110114
#VU62394 - Improper input validation
CVE-2022-21411		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041933
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 - 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61605 - NULL Pointer Dereference
CVE-2021-41495		 CWE-476 Low
No
No
 - 24.03.2022 SB2022032417
SB2022072059
SB2022080314
and 10 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Public exploit available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 - 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more


Showing elements 41 - 60 out of 68