Known vulnerabilities in Oracle HTTP Server - page 2

Vendor: Oracle
Software: Oracle HTTP Server
Software CPE: cpe:2.3:a:oracle:oracle_http_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle HTTP Server Oracle HTTP Server is affected by 93 known vulnerabilities: 2 critical, 22 high, 49 medium, 20 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103151 - Improper input validation
CVE-2025-21498		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012232
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 - 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 - 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU97150 - Improper Certificate Validation
CVE-2024-8096		 CWE-295 Low
No
No
 - 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96554 - Incorrect Default Permissions
CVE-2023-49582		 CWE-276 Low
No
No
 - 26.08.2024 SB2024082682
SB2024082937
SB2024082938
and 21 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU88576 - Improper input validation
CVE-2022-34381		 CWE-20 High
No
No
 - 16.04.2024 SB2024041703
SB2024041722
SB2024041723
and 7 more
#VU88211 - Resource exhaustion
CVE-2024-2511		 CWE-400 Medium
No
No
 - 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 91 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 - 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU86052 - Use After Free
CVE-2024-25062		 CWE-416 High
No
No
 - 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853		 CWE-299 Low
No
No
 - 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU85170 - State Issues
CVE-2023-6129		 CWE-371 Medium
No
No
 - 09.01.2024 SB2024010929
SB2024012250
SB2024012612
and 69 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853		 CWE-122 Medium
No
No
 - 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU82248 - Out-of-bounds read
CVE-2023-31122		 CWE-125 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 43 more
#VU72086 - Memory corruption
CVE-2023-24021		 CWE-119 High
No
No
 - 09.02.2023 SB2023020947
SB2023021587
SB2023021740
and 7 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more


Showing elements 21 - 40 out of 93