Oracle Database Server vulnerabilities
521 known vulnerabilities affecting oracle/database_server.
Total CVEs
521
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL118HIGH76MEDIUM256LOW71
Vulnerabilities
Page 22 of 27
CVE-2014-0377P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2014-01-15
CVE-2014-0377 [MEDIUM] CVE-2014-0377: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables.
nvd
CVE-2013-5858P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2014-01-15
CVE-2013-5858 [MEDIUM] CVE-2013-5858: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2015-0370.
nvd
CVE-2020-2527P4MEDIUMCVSS 4.1v12.1.0.2v12.2.0.1+2 more2020-01-15
CVE-2020-2527 [MEDIUM] CVE-2020-2527: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are aff
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via OracleNet to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks
nvd
CVE-2014-6514P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+2 more2015-01-21
CVE-2014-6514 [MEDIUM] CVE-2014-6514: Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2
Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2014-6547P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-6547 [MEDIUM] CVE-2014-6547: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, and CVE-2014
nvd
CVE-2014-4292P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4292 [MEDIUM] CVE-2014-4292: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4291P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4291 [MEDIUM] CVE-2014-4291: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4310P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4310 [MEDIUM] CVE-2014-4310: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4297P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4297 [MEDIUM] CVE-2014-4297: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4290P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4290 [MEDIUM] CVE-2014-4290: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4293P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4293 [MEDIUM] CVE-2014-4293: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2014-4296P4MEDIUMCVSS 4.0v11.1.0.7v11.2.0.3+3 more2014-10-15
CVE-2014-4296 [MEDIUM] CVE-2014-4296: Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4297, CVE-2014-4310, CVE-2014-6547, and CVE-2014
nvd
CVE-2009-1991P4LOWCVSS 3.6v9.2.0.8v9.2.0.8dv+2 more2009-10-22
CVE-2009-1991 [LOW] CVE-2009-1991: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that th
nvd
CVE-2014-4245P4LOWCVSS 3.5v11.1.0.7v11.2.0.3+2 more2014-07-17
CVE-2014-4245 [LOW] CVE-2014-4245: Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.1.0.7, 11.2.0.3,
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-1999-0784P4MEDIUMCVSS 5.0v7.1.4v7.3.32001-03-12
CVE-1999-0784 [MEDIUM] CVE-1999-0784: Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, ak
Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
nvd
CVE-2002-0856P4MEDIUMCVSS 5.0v9.2.12002-09-05
CVE-2002-0856 [MEDIUM] CVE-2002-0856: SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of
SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
nvd
CVE-2008-2602P4MEDIUMCVSS 4.6v10.1.0.5v10.2.0.4+1 more2008-07-15
CVE-2008-2602 [MEDIUM] CVE-2008-2602: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role.
nvd
CVE-2007-2110P4MEDIUMCVSS 4.4v9.0.1.5v9.2.0.7+1 more2007-04-18
CVE-2007-2110 [MEDIUM] CVE-2007-2110: Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.
Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared
nvd
CVE-2010-0867P4MEDIUMCVSS 4.0v10.2.0.4v11.1.0.7+1 more2010-04-13
CVE-2010-0867 [MEDIUM] CVE-2010-0867: Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.
Unspecified vulnerability in the JavaVM component in Oracle Database 10.2.0.4, 11.1.0.7, and 11.2.0.1.0 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2009-1015P4MEDIUMCVSS 4.0v9.2.0.8v9.2.0.8dv+2 more2009-07-14
CVE-2009-1015 [MEDIUM] CVE-2009-1015: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors.
nvd