Known vulnerabilities in Oracle HTTP Server - page 4

Vendor: Oracle
Software: Oracle HTTP Server
Software CPE: cpe:2.3:a:oracle:oracle_http_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 93
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle HTTP Server Oracle HTTP Server is affected by 93 known vulnerabilities: 2 critical, 22 high, 49 medium, 20 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68533 - Improper input validation
CVE-2022-21593		 CWE-20 Medium
No
No
 - 20.10.2022 SB2022102040
#VU65451 - Improper input validation
CVE-2020-35169		 CWE-20 High
No
No
 - 19.07.2022 SB2022072035
SB2022072036
SB2022072037
and 5 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU57482 - Improper input validation
CVE-2021-35666		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101929
#VU57484 - Improper input validation
CVE-2021-2480		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101929
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56059 - Out-of-bounds read
CVE-2021-35940		 CWE-125 Medium
No
No
 - 24.08.2021 SB2021082410
SB2021090120
SB2021083025
and 5 more
#VU54223 - NULL Pointer Dereference
CVE-2021-3537		 CWE-476 Medium
No
No
 - 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 27 more
#VU53589 - Use After Free
CVE-2021-22901		 CWE-416 High
No
No
 - 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU52378 - Improper input validation
CVE-2020-5360		 CWE-20 Medium
No
No
 - 21.04.2021 SB2021042102
SB2021042527
SB2021042528
and 2 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU46737 - Out-of-bounds read
CVE-2020-24977		 CWE-125 Medium
No
No
 - 04.09.2020 SB2020091517
SB2020091519
SB2020091641
and 33 more
#VU29488 - Integer overflow
CVE-2020-14155		 CWE-190 High
No
No
 - 02.07.2020 SB2020070226
SB2020081713
SB2021010712
and 37 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927		 CWE-601 Medium
No
No
 - 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU18113 - Improper input validation
CVE-2019-0220		 CWE-20 Low
No
No
 - 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more


Showing elements 61 - 80 out of 93