Oracle Database Server vulnerabilities
506 known vulnerabilities affecting oracle/database_server.
Total CVEs
506
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL113HIGH73MEDIUM250LOW70
Vulnerabilities
Page 21 of 26
CVE-2008-2602P4MEDIUMCVSS 4.6v10.1.0.5v10.2.0.4+1 more2008-07-15
CVE-2008-2602 [MEDIUM] CVE-2008-2602: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role.
nvd
CVE-2010-0851P4MEDIUMCVSS 4.0v9.2.0.8v9.2.0.8dv+2 more2010-04-13
CVE-2010-0851 [MEDIUM] CVE-2010-0851: Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, a
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2007-2117P4MEDIUMCVSS 6.8v9.2.0.52007-04-18
CVE-2007-2117 [MEDIUM] CVE-2007-2117: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has u
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon.
nvd
CVE-2015-4923P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2015-4923 [MEDIUM] CVE-2015-4923: Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2012-3134P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.2+1 more2012-07-17
CVE-2012-3134 [MEDIUM] CVE-2012-3134: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2015-4921P4MEDIUMCVSS 4.0v11.2.0.4v12.1.0.1+1 more2016-01-21
CVE-2015-4921 [MEDIUM] CVE-2015-4921: Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2011-2238P4MEDIUMCVSS 4.0v10.2.0.3v10.2.0.4+3 more2011-07-20
CVE-2011-2238 [MEDIUM] CVE-2011-2238: Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0
Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL.
nvd
CVE-2014-0377P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2014-01-15
CVE-2014-0377 [MEDIUM] CVE-2014-0377: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables.
nvd
CVE-2013-5858P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2014-01-15
CVE-2013-5858 [MEDIUM] CVE-2013-5858: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2015-0370.
nvd
CVE-2020-2527P4MEDIUMCVSS 4.1v12.1.0.2v12.2.0.1+2 more2020-01-15
CVE-2020-2527 [MEDIUM] CVE-2020-2527: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are aff
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via OracleNet to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks
nvd
CVE-2014-6514P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2015-01-21
CVE-2014-6514 [MEDIUM] CVE-2014-6514: Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2
Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2014-6547P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6547 [MEDIUM] CVE-2014-6547: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, and CVE-2014
nvd
CVE-2014-4292P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4292 [MEDIUM] CVE-2014-4292: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4291P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4291 [MEDIUM] CVE-2014-4291: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4310P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4310 [MEDIUM] CVE-2014-4310: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4297P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4297 [MEDIUM] CVE-2014-4297: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4290P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4290 [MEDIUM] CVE-2014-4290: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4293P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4293 [MEDIUM] CVE-2014-4293: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4296P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4296 [MEDIUM] CVE-2014-4296: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2009-1991P4LOWCVSS 3.6v9.2.0.8v9.2.0.8dv+2 more2009-10-22
CVE-2009-1991 [LOW] CVE-2009-1991: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that th
nvd