Oracle Database Server vulnerabilities
506 known vulnerabilities affecting oracle/database_server.
Total CVEs
506
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL113HIGH73MEDIUM250LOW70
Vulnerabilities
Page 20 of 26
CVE-2021-2173P4MEDIUMCVSS 4.1v12.1.0.2v12.2.0.1+2 more2021-04-22
CVE-2021-2173 [MEDIUM] CVE-2021-2173: Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recovery. While the vulnerability is in Recovery, attacks may significa
nvd
CVE-2010-4423P4MEDIUMCVSS 6.9v10.2.0.4v10.2.0.5+1 more2011-01-19
CVE-2010-4423 [MEDIUM] CVE-2010-4423: Unspecified vulnerability in the Cluster Verify Utility component in Oracle Database Server 10.2.0.4
Unspecified vulnerability in the Cluster Verify Utility component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2009-0997P4MEDIUMCVSS 4.0v11.1.0.62009-04-15
CVE-2009-0997 [MEDIUM] CVE-2009-0997: Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote
Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL.
nvd
CVE-2004-2345P4MEDIUMCVSS 6.5v9.0.1.4v9.0.1.5+2 more2004-12-31
CVE-2004-2345 [MEDIUM] CVE-2004-2345: Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
nvd
CVE-2010-0892P4MEDIUMCVSS 4.3v3.2.0.00.272010-07-13
CVE-2010-0892 [MEDIUM] CVE-2010-0892: Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27
Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2015-0479P4MEDIUMCVSS 4.0v11.2.0.3v11.2.0.4+1 more2015-04-16
CVE-2015-0479 [MEDIUM] CVE-2015-0479: Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2
Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2014-6538P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6538 [MEDIUM] CVE-2014-6538: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294, CVE-2014-4295, and CVE-2014-6563.
nvd
CVE-2014-6563P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6563 [MEDIUM] CVE-2014-6563: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294, CVE-2014-4295, and CVE-2014-6538.
nvd
CVE-2014-4294P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4294 [MEDIUM] CVE-2014-4294: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4295, CVE-2014-6538, and CVE-2014-6563.
nvd
CVE-2014-4295P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4295 [MEDIUM] CVE-2014-4295: Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4294, CVE-2014-6538, and CVE-2014-6563.
nvd
CVE-2014-4298P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4298 [MEDIUM] CVE-2014-4298: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6454P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6454 [MEDIUM] CVE-2014-6454: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, and CVE-2014-6542.
nvd
CVE-2014-4300P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4300 [MEDIUM] CVE-2014-4300: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6542P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6542 [MEDIUM] CVE-2014-6542: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, and CVE-2014-6454.
nvd
CVE-2014-4299P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4299 [MEDIUM] CVE-2014-4299: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6452P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6452 [MEDIUM] CVE-2014-6452: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2015-0483P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2015-04-16
CVE-2015-0483 [MEDIUM] CVE-2015-0483: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2016-0467P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2016-0467 [MEDIUM] CVE-2016-0467: Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, an
Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2016-5516P4MEDIUMCVSS 6.0v12.1.0.22016-10-25
CVE-2016-5516 [MEDIUM] CVE-2016-5516: Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows loca
Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect availability via unknown vectors.
nvd
CVE-2005-0298P4MEDIUMCVSS 5.0v8.0.6v8.0.6.3+10 more2005-05-02
CVE-2005-0298 [MEDIUM] CVE-2005-0298: The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating s
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
nvd