Oracle Database vulnerabilities

CVE-2020-5359 [MEDIUM] CWE-544 CVE-2020-5359: Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value V Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.

CVE-2022-21411 [MEDIUM] CVE-2022-21411: Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise RDBMS Gateway / Generic ODBC Connectivity. Successf

CVE-2021-35551 [MEDIUM] CVE-2021-35551: Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized abi

CVE-2016-3489 [MEDIUM] CVE-2016-3489: Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1 Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2020-14901 [MEDIUM] CVE-2020-14901: Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged attacker having Analyze Any privilege with network access via Oracle Net to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized access to cri

CVE-2016-5572 [MEDIUM] CWE-264 CVE-2016-5572: Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows loca Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2016-5497 [MEDIUM] CWE-284 CVE-2016-5497: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2017-3567 [MEDIUM] CVE-2017-3567: Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. Successful attacks of this vulnerability can result in u

CVE-2010-0076 [MEDIUM] CVE-2010-0076: Unspecified vulnerability in the Application Express Application Builder component in Oracle Databas Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2021-35557 [MEDIUM] CVE-2021-35557: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are aff Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauth

CVE-2021-35558 [MEDIUM] CVE-2021-35558: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are aff Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauth

CVE-2023-21827 [MEDIUM] CVE-2023-21827: Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database Data Redaction. Successful attacks of this vulnerability

CVE-2020-2978 [MEDIUM] CVE-2020-2978: Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Suppo Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While

CVE-2021-2334 [LOW] CVE-2021-2334: Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Databas Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Dat

CVE-2016-3488 [MEDIUM] CVE-2016-3488: Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows loc Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors.

CVE-2021-2335 [LOW] CVE-2021-2335: Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Databas Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Dat

CVE-2021-2336 [LOW] CVE-2021-2336: Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Databas Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Dat

CVE-2016-0691 [LOW] CVE-2016-0691: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0 Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690.

CVE-2016-0690 [LOW] CVE-2016-0690: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0 Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691.

CVE-2016-3484 [LOW] CVE-2016-3484: Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0 Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality and integrity via unknown vectors.