Oracle Database Server vulnerabilities
521 known vulnerabilities affecting oracle/database_server.
Total CVEs
521
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL118HIGH76MEDIUM256LOW71
Vulnerabilities
Page 14 of 27
CVE-2011-0792P4MEDIUMCVSS 6.5v11.1.0.7v10.2.0.52011-04-20
CVE-2011-0792 [MEDIUM] CVE-2011-0792: Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0
Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 (OWB) and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Dimensional Data Modeling.
nvd
CVE-2015-0373P4MEDIUMCVSS 6.5v11.1.0.7v11.2.0.3+3 more2015-01-21
CVE-2015-0373 [MEDIUM] CVE-2015-0373: Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2005-3443P4CRITICALCVSS 10.0v9.2.0.5v9.2.0.6+2 more2005-11-02
CVE-2005-3443 [CRITICAL] CVE-2005-3443: Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3
Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17.
nvd
CVE-2015-4740P4MEDIUMCVSS 6.0v11.1.0.7v11.2.0.3+3 more2015-07-16
CVE-2015-4740 [MEDIUM] CVE-2015-4740: Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11
Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2015-0468P4MEDIUMCVSS 6.0v11.1.0.7v11.2.0.3+1 more2015-07-16
CVE-2015-0468 [MEDIUM] CVE-2015-0468: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2012-0528P4MEDIUMCVSS 5.8v10.2.0.3v10.2.0.4+2 more2012-05-03
CVE-2012-0528 [MEDIUM] CVE-2012-0528: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7, and Oracle Enterprise Manager Grid Control, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Framework.
nvd
CVE-2006-5340P4HIGHCVSS 7.1v8.1.7.4v9.0.1.5+3 more2006-10-18
CVE-2006-5340 [HIGH] CVE-2006-5340: Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5
Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related
nvd
CVE-2007-0270P4MEDIUMCVSS 6.5v9.2.0.7v10.1.0.42007-01-17
CVE-2007-0270 [MEDIUM] CWE-119 CVE-2007-0270: Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated
Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via the GET_PROPERTY function in SYS.DBMS_DRS, aka DB03.
nvd
CVE-2022-21606P4MEDIUMCVSS 6.1v19c2022-10-18
CVE-2022-21606 [MEDIUM] CWE-79 CVE-2022-21606: Vulnerability in the Oracle Services for Microsoft Transaction Server component of Oracle Database S
Vulnerability in the Oracle Services for Microsoft Transaction Server component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Services for Microsoft Transaction Server. Successful attacks require human interac
nvd
CVE-2007-0271P4MEDIUMCVSS 6.5v9.0.1.5v9.2.0.72007-01-17
CVE-2007-0271 [MEDIUM] CVE-2007-0271: Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vecto
Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04. NOTE: Oracle has not disputed a reliable researcher claim that this is a buffer overflow in the ADD_LOGFILE procedure for the SYS.DBMS_LOGMNR package that allows code execution.
nvd
CVE-2006-0267P4CRITICALCVSS 9.0v9.2.0.6v10.1.0.42006-01-18
CVE-2006-0267 [CRITICAL] CVE-2006-0267: Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.
Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20.
nvd
CVE-2019-2582P4MEDIUMCVSS 5.3v12.2.0.1v18c2019-04-23
CVE-2019-2582 [MEDIUM] CVE-2019-2582: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are aff
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS a
nvd
CVE-2021-2234P4MEDIUMCVSS 5.3v12.1.0.2v12.2.0.1+2 more2021-04-22
CVE-2021-2234 [MEDIUM] CVE-2021-2234: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthoriz
nvd
CVE-2006-0552P4HIGHCVSS 7.5v8.0.6v8.0.6.3+1 more2006-02-04
CVE-2006-0552 [HIGH] CVE-2006-0552: Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5,
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v12.1.0.1v12.1.0.2+2 more2019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2014-6541P4MEDIUMCVSS 6.3v11.1.0.7v11.2.0.3+3 more2015-01-21
CVE-2014-6541 [MEDIUM] CVE-2014-6541: Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11
Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality via vectors related to DBMS_IR.
nvd
CVE-2007-5512P4HIGHCVSS 7.5v9.2.0.8dvv10.2.0.32007-10-17
CVE-2007-5512 [HIGH] CVE-2007-5512: Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10
Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21.
nvd
CVE-2007-0274P4MEDIUMCVSS 6.5v9.2.0.7v10.1.0.52007-01-17
CVE-2007-0274 [MEDIUM] CVE-2007-0274: Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and
Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbms_logrep_util (DB08), and (2) Oracle Streams and sys.dbms_capture_adm_internal privileges (DB09). NOTE: Oracle has not disputed reliable researcher claims that DB08 is for a buffer overflow in the GET_OBJECT_NAME
nvd
CVE-2026-47061P4MEDIUMCVSS 5.6≥ 19.3, ≤ 19.31≥ 21.3, ≤ 21.22+1 more2026-07-21
CVE-2026-47061 [MEDIUM] CWE-284 CVE-2026-47061: Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected
Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the JDBC executes to compromise JDBC. Successful attacks
nvd
CVE-2006-3703P4CRITICALCVSS 9.0v9.0.1.5v9.2.0.6+1 more2006-07-21
CVE-2006-3703 [CRITICAL] CVE-2006-3703: Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unkno
Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.
nvd