cbcvebase.

Oracle Secure Backup vulnerabilities

30 known vulnerabilities affecting oracle/secure_backup.

Total CVEs
30
CISA KEV
1
actively exploited
Public exploits
6
Exploited in wild
1
Severity breakdown
CRITICAL14HIGH4MEDIUM12

Vulnerabilities

Page 2 of 2
CVE-2011-2252P4MEDIUMCVSS 6.8v10.3.0.32011-07-20
CVE-2011-2252 [MEDIUM] CVE-2011-2252: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261.
nvd
CVE-2025-21578P4MEDIUMCVSS 6.7v12.1.0.1v12.1.0.2+4 more2025-04-15
CVE-2025-21578 [MEDIUM] CWE-732 CVE-2025-21578: Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected ar Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks
nvd
CVE-2010-3596P4MEDIUMCVSS 6.4v10.3.0.22011-01-19
CVE-2010-3596 [MEDIUM] CVE-2010-3596: Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote at Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown vectors.
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v18.1.0.1.02019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2008-5442P4MEDIUMCVSS 5.0v10.2.0.22009-01-14
CVE-2008-5442 [MEDIUM] CVE-2008-5442: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443.
nvd
CVE-2008-5441P4MEDIUMCVSS 5.0v10.2.0.22009-01-14
CVE-2008-5441 [MEDIUM] CVE-2008-5441: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443.
nvd
CVE-2008-3981P4MEDIUMCVSS 5.0v10.1.0.12009-01-14
CVE-2008-3981 [MEDIUM] CVE-2008-3981: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2008-5443P4MEDIUMCVSS 5.0v10.2.0.22009-01-14
CVE-2008-5443 [MEDIUM] CVE-2008-5443: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5442.
nvd
CVE-2008-5445P4MEDIUMCVSS 5.0v10.2.0.22009-01-14
CVE-2008-5445 [MEDIUM] CVE-2008-5445: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed
nvd
CVE-2011-2251P4MEDIUMCVSS 4.3v10.3.0.32011-07-20
CVE-2011-2251 [MEDIUM] CVE-2011-2251: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 all Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect integrity via unknown vectors.
nvd
Oracle Secure Backup vulnerabilities | cvebase