CVE-2023-22097

CVE-2023-22097 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.34 and earlier and 8.1.0; an attacker with network access via multiple protocols could cause a hang or crash (DoS). Remediation exists in Linux distro advisories (e.g., AlmaLinux ALSA-2024-0894 lists MySQL InnoDB fixes...

CVE-2023-22096

CVE-2023-22096 affects Oracle Database Server, Java VM component. Affected: Oracle Database Server versions 19.3–19.20 and 21.3–21.11. Description states that a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net can compromise the Java VM...

CVE-2023-22095

Vulnerability CVE-2023-22095 affects Oracle MySQL Server 8.1.0 (Server: Optimizer). A low-privileged attacker with network access across multiple protocols can cause a hang or frequent crash of MySQL Server (DoS). The issue is explicitly described as exploitable via the network with low privilege...

CVE-2023-22092

CVE-2023-22092 affects Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.34 and earlier. The vulnerability allows a high-privilege attacker with network access (via multiple protocols) to cause a complete DoS of MySQL Server. No exploit details are provided in the initial documen...

CVE-2023-22093

CVE-2023-22093 affects Oracle E-Business Suite iRecruitment (component: Requisition and Vacancy) with affected versions 12.2.3–12.2.12. The vulnerability allows an unauthenticated attacker, over HTTP, to read and perform unauthorized update/insert/delete operations on Oracle iRecruitment data, pe...

CVE-2023-22091

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Compiler. Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Difficult to exploit...

CVE-2023-22091

Removed by vendor...

CVE-2023-22085

CVE-2023-22085 affects Oracle Hospitality Opera 5, Opera 5 Property Services component, version 5.6. The root cause described in PT-2023-6296 is insufficient input validation in Opera 5, allowing a remote attacker with network access over HTTP to execute arbitrary code and potentially take over H...

CVE-2023-22087

CVE-2023-22087 affects Oracle Hospitality Opera 5 (OPERA 5 Property Services) version 5.6. Root cause: insufficient input validation in the Opera component, enabling a remote attacker with network access via HTTP and low privileges to take over Hospitality OPERA 5 Property Services. In the connec...

CVE-2023-22084

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

CVE-2023-22084

Disclaimer: This data contains information about vulnerable...

CVE-2023-22081

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise...

CVE-2023-22079

CVE-2023-22079 concerns Oracle MySQL Server, component Server: Optimizer. Affected: MySQL 8.0.34 and earlier. Description: a low-privileged, network-accessible attacker can cause the MySQL Server to hang or crash (complete DoS) via multiple protocols. CVSS v3.1 base score 6.5 (Availability HIGH; ...

CVE-2023-22077

CVE-2023-22077 affects Oracle Database Server’s Recovery Manager. Affected: Oracle Database versions 19.3–19.20 and 21.3–21.11. The flaw allows a high-privilege attacker with a DBA role and network access via Oracle Net to cause a hang or frequent crash of Recovery Manager (denial of service). CV...

CVE-2023-22075

CVE-2023-22075 affects Oracle Database Server, specifically the Database Sharding component. Affected versions are 19.3–19.20 and 21.3–21.11. The issue arises from insufficient input validation in Oracle Database Sharding, enabling a high-privilege user with network access via Oracle Net to cause...

CVE-2023-22068

Removed by vendor...

CVE-2023-22069

CVE-2023-22069 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated remote compromise via network access over T3, IIOP (and other protocols per report), enabling takeover of the WebLogic Server...

CVE-2023-22065

CVE-2023-22065 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 8.0.33 and earlier. Exploitation can lead to a hang or frequent crash (DoS) of MySQL Server. Remediation in connected advisories points to upgrading to a fixed release (e.g., MySQL 8.0.34+ or vendor-specific p...

CVE-2023-22065

Removed by vendor...

CVE-2023-22064

CVE-2023-22064 affects Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.34 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or repeatable crash (a complete DoS) of MySQL Server; CVSS v3.1 base score 4.9 (A...