Known vulnerabilities in Oracle HTTP Server - page 4

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:oracle_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 93
Public exploits: 13
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle HTTP Server Oracle HTTP Server is affected by 93 known vulnerabilities: 2 critical, 22 high, 49 medium, 20 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68533 - Improper input validation
CVE-2022-21593
CWE-20 Medium
No
No
- 20.10.2022 SB2022102040
#VU65451 - Improper input validation
CVE-2020-35169
CWE-20 High
No
No
- 19.07.2022 SB2022072035
SB2022072036
SB2022072037
and 5 more
#VU64921 - Heap-based Buffer Overflow
CVE-2022-2274
CWE-122 High
Available
No
- 05.07.2022 SB2022070509
SB2022070531
SB2022102078
and 7 more
#VU64089 - Improper Authentication
CVE-2022-31813
CWE-287 Medium
No
No
- 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782
CWE-303 Medium
No
No
- 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
- 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU61284 - Out-of-bounds write
CVE-2022-23943
CWE-787 High
No
No
- 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
- 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224
CWE-918 Medium
No
No
- 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59052 - Uncontrolled Recursion
CVE-2021-42717
CWE-674 Medium
No
No
- 19.12.2021 SB2021121901
SB2021121902
SB2023011845
and 5 more
#VU56679 - Memory corruption
CVE-2021-39275
CWE-119 Medium
No
No
- 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438
CWE-918 High
Available
Exploited
- 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56059 - Out-of-bounds read
CVE-2021-35940
CWE-125 Medium
No
No
- 24.08.2021 SB2021082410
SB2021090120
SB2021083025
and 5 more
#VU54223 - NULL Pointer Dereference
CVE-2021-3537
CWE-476 Medium
No
No
- 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 27 more
#VU53589 - Use After Free
CVE-2021-22901
CWE-416 High
No
No
- 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU46737 - Out-of-bounds read
CVE-2020-24977
CWE-125 Medium
No
No
- 04.09.2020 SB2020091517
SB2020091519
SB2020091641
and 33 more
#VU29488 - Integer overflow
CVE-2020-14155
CWE-190 High
No
No
- 02.07.2020 SB2020070226
SB2020081713
SB2021010712
and 37 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927
CWE-601 Medium
No
No
- 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20386 - Use After Free
CVE-2019-10082
CWE-416 Medium
No
No
- 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU18113 - Improper input validation
CVE-2019-0220
CWE-20 Low
No
No
- 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more


Showing elements 61 - 80 out of 93