Known vulnerabilities in Oracle Database Server - page 9

Vendor: Oracle
Software: Oracle Database Server
Software CPE: cpe:2.3:a:oracle:oracle_database:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 236
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Database Server Oracle Database Server is affected by 236 known vulnerabilities: 1 critical, 26 high, 115 medium, 94 low Critical High Medium Low

Vulnerabilities (236)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29919 - Improper input validation
CVE-2020-2978		 CWE-20 Low
Available
No
 - 15.07.2020 SB2020071520
#VU29909 - Improper input validation
CVE-2020-2969		 CWE-20 Medium
No
No
 - 15.07.2020 SB2020071520
#VU29908 - Improper input validation
CVE-2020-2968		 CWE-20 High
No
No
 - 15.07.2020 SB2020071520
#VU26905 - Improper input validation
CVE-2020-2735		 CWE-20 High
No
No
 - 15.04.2020 SB2020041701
#VU26906 - Improper input validation
CVE-2016-10251		 CWE-20 High
No
No
 - 15.04.2020 SB2020041701
#VU26907 - Improper input validation
CVE-2020-2737		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
#VU26908 - Improper input validation
CVE-2019-2853		 CWE-20 Medium
No
No
 - 15.04.2020 SB2020041701
SB2019071656
#VU26910 - Improper input validation
CVE-2020-2734		 CWE-20 Low
No
No
 - 15.04.2020 SB2020041701
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 - 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25546 - Heap-based Buffer Overflow
CVE-2020-8112		 CWE-122 Medium
No
No
 - 24.02.2020 SB2020011450
SB2020022412
SB2020022413
and 20 more
#VU25002 - Session Fixation
CVE-2019-17563		 CWE-384 Low
No
No
 - 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU24416 - Improper input validation
CVE-2020-2511		 CWE-20 Medium
No
No
 - 20.01.2020 SB2020012015
#VU24417 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-2510		 CWE-89 Medium
No
No
 - 20.01.2020 SB2020012015
#VU24418 - Improper input validation
CVE-2020-2518		 CWE-20 Medium
No
No
 - 20.01.2020 SB2020012015
#VU24419 - Improper input validation
CVE-2020-2512		 CWE-20 Medium
No
No
 - 20.01.2020 SB2020012015
#VU24420 - Improper input validation
CVE-2020-2515		 CWE-20 Medium
No
No
 - 20.01.2020 SB2020012015
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU16185 - Heap-based Buffer Overflow
CVE-2018-18314		 CWE-122 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 10 more
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more
#VU6666 - Out-of-bounds read
CVE-2016-9843		 CWE-125 Low
No
No
 - 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 29 more


Showing elements 161 - 180 out of 236