Known vulnerabilities in Oracle HTTP Server - page 3

Vendor: Oracle
Software: Oracle HTTP Server
Software CPE: cpe:2.3:a:oracle:oracle_http_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle HTTP Server Oracle HTTP Server is affected by 93 known vulnerabilities: 2 critical, 22 high, 49 medium, 20 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88640 - Improper input validation
CVE-2024-20991		 CWE-20 Medium
No
No
 - 17.04.2024 SB2024041745
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU82220 - Improper input validation
CVE-2023-22019		 CWE-20 Medium
No
No
 - 18.10.2023 SB20231018113
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 - 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 - 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 - 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 - 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 - 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU64921 - Heap-based Buffer Overflow
CVE-2022-2274		 CWE-122 High
Available
No
 - 05.07.2022 SB2022070509
SB2022070531
SB2022102078
and 7 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782		 CWE-303 Medium
No
No
 - 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU62741 - Integer overflow
CVE-2022-29824		 CWE-190 High
No
No
 - 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 - 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU59052 - Uncontrolled Recursion
CVE-2021-42717		 CWE-674 Medium
No
No
 - 19.12.2021 SB2021121901
SB2021121902
SB2023011845
and 5 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more


Showing elements 41 - 60 out of 93