Known vulnerabilities in Oracle HTTP Server - page 3

Vendor: Oracle
Software: Oracle HTTP Server
Software CPE: cpe:2.3:a:oracle:oracle_http_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 13
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle HTTP Server Oracle HTTP Server is affected by 93 known vulnerabilities: 2 critical, 22 high, 49 medium, 20 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88576 - Improper input validation
CVE-2022-34381		 CWE-20 High
No
No
 - 16.04.2024 SB2024041703
SB2024041722
SB2024041723
and 7 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU82248 - Out-of-bounds read
CVE-2023-31122		 CWE-125 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 43 more
#VU82220 - Improper input validation
CVE-2023-22019		 CWE-20 Medium
No
No
 - 18.10.2023 SB20231018113
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 - 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 - 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU77552 - Exposure of sensitive information to an unauthorized actor
CVE-2015-3195		 CWE-200 Medium
No
No
 - 20.06.2023 SB2017050814
SB2023071321
SB2016042115
and 7 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 - 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 - 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 - 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU72086 - Memory corruption
CVE-2023-24021		 CWE-119 High
No
No
 - 09.02.2023 SB2023020947
SB2023021587
SB2023021740
and 7 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 - 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 - 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU62741 - Integer overflow
CVE-2022-29824		 CWE-190 High
No
No
 - 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more


Showing elements 41 - 60 out of 93