Oracle Database Server vulnerabilities
521 known vulnerabilities affecting oracle/database_server.
Total CVEs
521
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL118HIGH76MEDIUM256LOW71
Vulnerabilities
Page 21 of 27
CVE-2009-0997P4MEDIUMCVSS 4.0v11.1.0.62009-04-15
CVE-2009-0997 [MEDIUM] CVE-2009-0997: Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote
Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL.
nvd
CVE-2004-2345P4MEDIUMCVSS 6.5v9.0.1.4v9.0.1.5+2 more2004-12-31
CVE-2004-2345 [MEDIUM] CVE-2004-2345: Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
nvd
CVE-2010-0892P4MEDIUMCVSS 4.3v3.2.0.00.272010-07-13
CVE-2010-0892 [MEDIUM] CVE-2010-0892: Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27
Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2.0.00.27 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2015-4923P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2015-4923 [MEDIUM] CVE-2015-4923: Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2014-4298P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4298 [MEDIUM] CVE-2014-4298: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6454P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6454 [MEDIUM] CVE-2014-6454: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, and CVE-2014-6542.
nvd
CVE-2014-4300P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4300 [MEDIUM] CVE-2014-4300: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6542P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6542 [MEDIUM] CVE-2014-6542: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6452, and CVE-2014-6454.
nvd
CVE-2014-4299P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4299 [MEDIUM] CVE-2014-4299: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4300, CVE-2014-6452, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2014-6452P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6452 [MEDIUM] CVE-2014-6452: Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0
Unspecified vulnerability in the SQLJ component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4298, CVE-2014-4299, CVE-2014-4300, CVE-2014-6454, and CVE-2014-6542.
nvd
CVE-2015-0483P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2015-04-16
CVE-2015-0483 [MEDIUM] CVE-2015-0483: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2016-0467P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2016-0467 [MEDIUM] CVE-2016-0467: Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, an
Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2016-5516P4MEDIUMCVSS 6.0v12.1.0.22016-10-25
CVE-2016-5516 [MEDIUM] CVE-2016-5516: Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows loca
Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect availability via unknown vectors.
nvd
CVE-2005-0298P4MEDIUMCVSS 5.0v8.0.6v8.0.6.3+10 more2005-05-02
CVE-2005-0298 [MEDIUM] CVE-2005-0298: The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating s
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
nvd
CVE-2010-0851P4MEDIUMCVSS 4.0v9.2.0.8v9.2.0.8dv+2 more2010-04-13
CVE-2010-0851 [MEDIUM] CVE-2010-0851: Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, a
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2007-2117P4MEDIUMCVSS 6.8v9.2.0.52007-04-18
CVE-2007-2117 [MEDIUM] CVE-2007-2117: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has u
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon.
nvd
CVE-2015-0479P4MEDIUMCVSS 4.0v11.2.0.3v11.2.0.4+1 more2015-04-16
CVE-2015-0479 [MEDIUM] CVE-2015-0479: Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2
Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2012-3134P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.2+1 more2012-07-17
CVE-2012-3134 [MEDIUM] CVE-2012-3134: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2015-4921P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2015-4921 [MEDIUM] CVE-2015-4921: Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2011-2238P4MEDIUMCVSS 4.0v10.2.0.3v10.2.0.4+3 more2011-07-20
CVE-2011-2238 [MEDIUM] CVE-2011-2238: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL.
nvd