Oracle Database Server vulnerabilities
502 known vulnerabilities affecting oracle/database_server.
Total CVEs
502
CISA KEV
0
Public exploits
25
Exploited in wild
0
Severity breakdown
CRITICAL112HIGH71MEDIUM250LOW69
Vulnerabilities
Page 13 of 26
CVE-2011-2248MEDIUMCVSS 6.8v11.1.0.7v11.2.0.1+1 more2011-07-20
CVE-2011-2248 [MEDIUM] CVE-2011-2248: Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server
Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.
nvd
CVE-2011-0832MEDIUMCVSS 6.0v11.1.0.7v11.2.0.1+1 more2011-07-20
CVE-2011-0832 [MEDIUM] CVE-2011-0832: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-0835 and CVE-2011-0880.
nvd
CVE-2011-0880MEDIUMCVSS 6.5v11.1.0.7v11.2.0.1+1 more2011-07-20
CVE-2011-0880 [MEDIUM] CVE-2011-0880: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-0832 and CVE-2011-0835.
nvd
CVE-2011-0838MEDIUMCVSS 6.5v11.1.0.7v11.2.0.1+1 more2011-07-20
CVE-2011-0838 [MEDIUM] CVE-2011-0838: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to create procedure privileges.
nvd
CVE-2011-2231MEDIUMCVSS 4.3v10.1.0.5v10.2.0.3+4 more2011-07-20
CVE-2011-2231 [MEDIUM] CVE-2011-2231: Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.
Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1, Oracle Fusion Middleware 10.1.3.5, allows remote attackers to affect availability via unknown vectors.
nvd
CVE-2011-2230MEDIUMCVSS 5.0v10.1.0.5v10.2.0.3+4 more2011-07-20
CVE-2011-2230 [MEDIUM] CVE-2011-2230: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect availability via unknown vectors.
nvd
CVE-2011-0870MEDIUMCVSS 6.8v10.1.0.5v10.2.0.3+5 more2011-07-20
CVE-2011-0870 [MEDIUM] CVE-2011-0870: Unspecified vulnerability in the Schema Management component in Oracle Database Server 10.1.0.5, 10.
Unspecified vulnerability in the Schema Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2011-2238MEDIUMCVSS 4.0v10.2.0.3v10.2.0.4+3 more2011-07-20
CVE-2011-2238 [MEDIUM] CVE-2011-2238: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL.
nvd
CVE-2011-2243LOWCVSS 3.5v11.1.0.7.3v11.2.0.1+1 more2011-07-20
CVE-2011-2243 [LOW] CVE-2011-2243: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7.3, 11.2.0.1
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7.3, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect integrity, related to SYSDBA.
nvd
CVE-2011-2242LOWCVSS 1.3v11.2.0.1v11.2.0.22011-07-20
CVE-2011-2242 [LOW] CVE-2011-2242: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.1 and 11.2.0.
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.1 and 11.2.0.2 allows local users to affect confidentiality, related to XML DB FTP.
nvd
CVE-2011-2240LOWCVSS 1.7v10.1.0.52011-07-20
CVE-2011-2240 [LOW] CVE-2011-2240: Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1
Unspecified vulnerability in the Oracle Universal Installer component in Oracle Database Server 10.1.0.5 allows local users to affect confidentiality via unknown vectors.
nvd
CVE-2011-0787MEDIUMCVSS 5.5v11.1.0.72011-04-20
CVE-2011-0787 [MEDIUM] CVE-2011-0787: Unspecified vulnerability in the Application Service Level Management component in Oracle Database S
Unspecified vulnerability in the Application Service Level Management component in Oracle Database Server 11.1.0.7 and Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Service Level Agreements.
nvd
CVE-2011-0792MEDIUMCVSS 6.5v11.1.0.7v10.2.0.52011-04-20
CVE-2011-0792 [MEDIUM] CVE-2011-0792: Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0
Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 (OWB) and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Dimensional Data Modeling.
nvd
CVE-2011-0785MEDIUMCVSS 4.3v10.1.0.5v10.2.0.3+5 more2011-04-20
CVE-2011-0785 [MEDIUM] CVE-2011-0785: Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1,
Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-0805MEDIUMCVSS 4.3v10.1.0.5v10.2.0.4+2 more2011-04-20
CVE-2011-0805 [MEDIUM] CVE-2011-0805: Unspecified vulnerability in the UIX component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.
Unspecified vulnerability in the UIX component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-0806MEDIUMCVSS 5.0v10.1.0.5v10.2.0.4+4 more2011-04-20
CVE-2011-0806 [MEDIUM] CVE-2011-0806: Unspecified vulnerability in the Network Foundation component in Oracle Database Server 10.1.0.5, 10
Unspecified vulnerability in the Network Foundation component in Oracle Database Server 10.1.0.5, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2, when running on Windows, allows remote attackers to affect availability via unknown vectors.
nvd
CVE-2011-0799MEDIUMCVSS 6.5v11.1.0.7v11.2.0.1+1 more2011-04-20
CVE-2011-0799 [MEDIUM] CVE-2011-0799: Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0
Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 (OWB), 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Warehouse Builder User Account.
nvd
CVE-2011-0793LOWCVSS 3.6v10.2.0.3v10.2.0.4+3 more2011-04-20
CVE-2011-0793 [LOW] CVE-2011-0793: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect integrity and availability, related to SYSDBA.
nvd
CVE-2011-0804LOWCVSS 3.6v10.2.0.3v10.2.0.4+4 more2011-04-20
CVE-2011-0804 [LOW] CVE-2011-0804: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2010-3600HIGHCVSS 7.5PoCv11.1.0.7v11.2.0.12011-01-19
CVE-2010-3600 [HIGH] CVE-2010-3600: Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7
Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim
nvd