Known vulnerabilities in Oracle Database Server - page 2

Vendor: Oracle
Software: Oracle Database Server
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 236
Public exploits: 16
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Database Server Oracle Database Server is affected by 236 known vulnerabilities: 1 critical, 26 high, 115 medium, 94 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121705 - Improper input validation
CVE-2026-21939		 CWE-20 Low
No
No
 - 20.01.2026 SB2026012079
SB20260422140
#VU121706 - Improper input validation
CVE-2026-21975		 CWE-20 Low
No
No
 21.3 20.01.2026 SB2026012079
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383		 CWE-362 Medium
No
No
 - 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 - 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 25 more
#VU117485 - Improper input validation
CVE-2025-61755		 CWE-20 Low
No
No
 - 22.10.2025 SB20251022107
SB2026012079
#VU121774 - Improper input validation
CVE-2025-61881		 CWE-20 Medium
No
No
 19.29, 21.20, 23.9.1 21.10.2025 SB2026012101
#VU121775 - Improper input validation
CVE-2025-53047		 CWE-20 Medium
No
No
 19.29, 21.20, 23.9.1 21.10.2025 SB2026012101
#VU121776 - Improper input validation
CVE-2025-53051		 CWE-20 Low
No
No
 23.9.1 21.10.2025 SB2026012101
#VU121777 - Improper input validation
CVE-2025-61749		 CWE-20 Low
No
No
 23.9.1 21.10.2025 SB2026012101
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949		 CWE-611 High
No
No
 23.9.1 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU113802 - Heap-based Buffer Overflow
CVE-2025-54874		 CWE-122 High
No
No
 - 11.08.2025 SB2025081148
SB2025081159
SB2025081160
and 8 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 21.20, 23.9.1 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU109678 - Improper input validation
CVE-2019-2776		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071638
#VU109679 - Improper input validation
CVE-2019-2799		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071638
#VU109680 - Improper input validation
CVE-2019-2749		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071638
#VU109681 - Improper input validation
CVE-2019-2484		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071638
#VU109682 - Out-of-bounds read
CVE-2019-2753		 CWE-125 Medium
No
No
 - 16.07.2019 SB2019071638
#VU109683 - Out-of-bounds read
CVE-2019-2569		 CWE-125 Low
No
No
 - 16.07.2019 SB2019071638
#VU36803 - NULL Pointer Dereference
CVE-2016-9572		 CWE-476 Medium
No
No
 - 01.08.2018 SB2018080136
SB2017092622
SB2017011935
and 14 more


Showing elements 21 - 40 out of 236