Known vulnerabilities in Oracle Database Server - page 2

Vendor: Oracle
Software: Oracle Database Server
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 236
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Database Server Oracle Database Server is affected by 236 known vulnerabilities: 1 critical, 26 high, 115 medium, 94 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121705 - Improper input validation
CVE-2026-21939		 CWE-20 Low
No
No
 - 20.01.2026 SB2026012079
SB20260422140
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383		 CWE-362 Medium
No
No
 - 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 - 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 23 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU121780 - Improper input validation
CVE-2025-30751		 CWE-20 High
No
No
 23.9.0 29.07.2025 SB2025072995
#VU121781 - Improper input validation
CVE-2025-50069		 CWE-20 Medium
No
No
 19.28, 21.19 29.07.2025 SB2025072995
#VU121782 - Improper input validation
CVE-2025-50070		 CWE-20 Low
No
No
 23.9.0 29.07.2025 SB2025072995
#VU121783 - Improper input validation
CVE-2025-50066		 CWE-20 Low
No
No
 19.28, 21.19, 23.9.0 29.07.2025 SB2025072995
#VU121784 - Improper input validation
CVE-2025-30750		 CWE-20 Low
No
No
 19.28, 21.19, 23.9.0 29.07.2025 SB2025072995
#VU107470 - Improper input validation
CVE-2025-30736		 CWE-20 Medium
No
No
 23.8 16.04.2025 SB2025041625
#VU107471 - Improper input validation
CVE-2025-30701		 CWE-20 Medium
No
No
 23.8 16.04.2025 SB2025041625
#VU107472 - Improper input validation
CVE-2025-30733		 CWE-20 Medium
No
No
 23.8 16.04.2025 SB2025041625
#VU107473 - Improper input validation
CVE-2025-30694		 CWE-20 Medium
No
No
 23.8 16.04.2025 SB2025041625
#VU107474 - Improper input validation
CVE-2025-30702		 CWE-20 Medium
No
No
 - 16.04.2025 SB2025041625
#VU105889 - Improper Verification of Cryptographic Signature
CVE-2020-36843		 CWE-347 Medium
No
No
 23.8 20.03.2025 SB2025032014
SB2025032666
SB2025032919
and 5 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 19.28, 21.19, 23.9.0 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 23.8 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU103146 - Improper input validation
CVE-2025-21553		 CWE-20 Low
No
No
 23.7 21.01.2025 SB2025012173
#VU98646 - Improper input validation
CVE-2024-21211		 CWE-20 Low
No
No
 23.7 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 16 more
#VU73236 - Untrusted Search Path
CVE-2022-26345		 CWE-426 Low
No
No
 - 10.03.2023 SB2023031031
SB2025012173


Showing elements 21 - 40 out of 236