Oracle Database Server vulnerabilities

502 known vulnerabilities affecting oracle/database_server.

Total CVEs
502
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL112HIGH71MEDIUM250LOW69

Vulnerabilities

Page 24 of 26
CVE-2006-0266CRITICALCVSS 9.0v9.0.1.5v9.2.0.7+1 more2006-01-18
CVE-2006-0266 [CRITICAL] CVE-2006-0266: Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0. Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB19.
nvd
CVE-2006-0290CRITICALCVSS 10.0v9.2.0.72006-01-18
CVE-2006-0290 [CRITICAL] CVE-2006-0290: Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1 Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10 has unspecified impact and attack vectors, as identified by Oracle Vuln# WF01 in the Oracle Workflow Cartridge component.
nvd
CVE-2006-0259CRITICALCVSS 10.0v10.1.0.52006-01-18
CVE-2006-0259 [CRITICAL] CVE-2006-0259: Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text component. NOTE: details are unavailable from Oracle, but they have not publicly
nvd
CVE-2006-0285CRITICALCVSS 10.0v8.1.7.4v9.0.1.5+1 more2006-01-18
CVE-2006-0285 [CRITICAL] CVE-2006-0285: Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0. Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.
nvd
CVE-2006-0271CRITICALCVSS 10.0v8.1.7.42006-01-18
CVE-2006-0271 [CRITICAL] CVE-2006-0271: Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9. Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the proble
nvd
CVE-2005-3641HIGHCVSS 7.5v7.0.2v7.0.64+16 more2005-11-16
CVE-2005-3641 [HIGH] CVE-2005-3641: Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
nvd
CVE-2005-3438CRITICALCVSS 10.0≤ 10.1.0.4.22005-11-02
CVE-2005-3438 [CRITICAL] CVE-2005-3438: Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impa Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possib
nvd
CVE-2005-3440CRITICALCVSS 10.0v10.1.0.32005-11-02
CVE-2005-3440 [CRITICAL] CVE-2005-3440: Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unk Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB08.
nvd
CVE-2005-3445CRITICALCVSS 10.0v8.1.7.4v9.2.0.5+5 more2005-11-02
CVE-2005-3445 [CRITICAL] CVE-2005-3445: Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 an Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
nvd
CVE-2005-3446CRITICALCVSS 10.0v9.2.0.5v9.2.0.62005-11-02
CVE-2005-3446 [CRITICAL] CVE-2005-3446: Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Appli Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.
nvd
CVE-2005-3437CRITICALCVSS 10.0v10.1.0.3v10.1.0.42005-11-02
CVE-2005-3437 [CRITICAL] CVE-2005-3437: Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has un Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01.
nvd
CVE-2005-3443CRITICALCVSS 10.0v9.2.0.5v9.2.0.6+2 more2005-11-02
CVE-2005-3443 [CRITICAL] CVE-2005-3443: Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# DB17.
nvd
CVE-2005-3444CRITICALCVSS 10.0v8.1.7.4v9.2.0.5+2 more2005-11-02
CVE-2005-3444 [CRITICAL] CVE-2005-3444: Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and attack vectors, aka Oracle Vuln# DB26.
nvd
CVE-2005-3206MEDIUMCVSS 5.0PoCv9.0.2.42005-10-14
CVE-2005-3206 [MEDIUM] CVE-2005-3206: iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
nvd
CVE-2005-3205LOWCVSS 3.5v9.0.2.42005-10-14
CVE-2005-3205 [LOW] CWE-79 CVE-2005-3205: Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table.
nvd
CVE-2005-1197HIGHCVSS 7.5v10.1.0.2v10.1.0.3+2 more2005-05-02
CVE-2005-1197 [HIGH] CVE-2005-1197: SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle D SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
nvd
CVE-2005-0298MEDIUMCVSS 5.0v8.0.6v8.0.6.3+10 more2005-05-02
CVE-2005-0298 [MEDIUM] CVE-2005-0298: The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating s The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
nvd
CVE-2005-0297HIGHCVSS 7.5v10.2.12005-01-18
CVE-2005-0297 [HIGH] CVE-2005-0297: SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitra SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.
nvd
CVE-2004-2345MEDIUMCVSS 6.5v9.0.1.4v9.0.1.5+2 more2004-12-31
CVE-2004-2345 [MEDIUM] CVE-2004-2345: Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
nvd
CVE-2004-1339MEDIUMCVSS 6.5v10.2.12004-12-23
CVE-2004-1339 [MEDIUM] CWE-89 CVE-2004-1339: SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS defau SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
nvd
← Previous24 / 26Next →