Known vulnerabilities in Oracle REST Data Services 24.3.0

Vendor: Oracle
Software: Oracle REST Data Services
Version: 24.3.0
Software CPE: cpe:2.3:a:oracle:ords:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle REST Data Services version 24.3.0 Oracle REST Data Services 24.3.0 is affected by 14 vulnerabilities: 4 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133409 - Improper input validation
CVE-2026-46840		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133410 - Improper input validation
CVE-2026-46775		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133411 - Improper input validation
CVE-2026-46839		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133412 - Improper input validation
CVE-2026-35277		 CWE-20 High
No
No
 - 05.06.2026 SB2026060515
#VU133413 - Improper input validation
CVE-2026-35266		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133414 - Improper input validation
CVE-2026-46829		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133415 - Improper input validation
CVE-2026-46842		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133416 - Improper input validation
CVE-2026-46843		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133417 - Improper input validation
CVE-2026-46841		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU133418 - Improper input validation
CVE-2026-46830		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060515
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 - 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 9 more
#VU123883 - Resource exhaustion
CVE-2025-66453		 CWE-400 Low
No
No
 - 11.03.2026 SB2026031137
SB2026031139
SB2026032529
and 4 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 - 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more