Known vulnerabilities in Oracle REST Data Services

Vendor: Oracle
Software: Oracle REST Data Services
Software CPE: cpe:2.3:a:oracle:ords:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 30
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle REST Data Services Oracle REST Data Services is affected by 30 known vulnerabilities: 5 high, 19 medium, 6 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133409 - Improper input validation
CVE-2026-46840		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133410 - Improper input validation
CVE-2026-46775		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133411 - Improper input validation
CVE-2026-46839		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133412 - Improper input validation
CVE-2026-35277		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133413 - Improper input validation
CVE-2026-35266		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133414 - Improper input validation
CVE-2026-46829		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133415 - Improper input validation
CVE-2026-46842		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133416 - Improper input validation
CVE-2026-46843		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133417 - Improper input validation
CVE-2026-46841		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133418 - Improper input validation
CVE-2026-46830		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 - 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 9 more
#VU123883 - Resource exhaustion
CVE-2025-66453		 CWE-400 Low
No
No
 - 11.03.2026 SB2026031137
SB2026031139
SB2026032529
and 4 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU112914 - Improper input validation
CVE-2025-30756		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071616
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 - 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU85304 - Excessive Iteration
CVE-2023-4043		 CWE-834 Medium
No
No
 23.3.1 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 23.2.2 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 23.1.0 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 22.1.1 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more


Showing elements 1 - 20 out of 30