Lucene search
K

2885 matches found

NCSC
NCSC
added 2022/04/20 12:0 a.m.3 views

Vulnerabilities fixed in Oracle Database Server

Oracle has fixed vulnerabilities in the following products: Database - Enterprise Edition Database Configuration Assistant Spatial and Graph Application Express APEX The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage:...

8.2CVSS7.5AI score0.01226EPSS
Exploits1
OSV
OSV
added 2022/04/19 9:15 p.m.2 views

CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

6.5CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2022/04/19 9:15 p.m.13 views

CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

6.5CVSS0.00179EPSS
Exploits0References1
NVD
NVD
added 2022/04/19 9:15 p.m.12 views

CVE-2022-21411

Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

5.5CVSS0.00175EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/19 8:38 p.m.21 views

CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

6.5CVSS6.2AI score0.00179EPSS
Exploits0References1
CVE
CVE
added 2022/04/19 8:38 p.m.117 views

CVE-2022-21498

CVE-2022-21498 affects the Java VM component of Oracle Database Server. Affected: Oracle Database Server versions 12.1.0.2, 19c, and 21c. Root cause: a vulnerability in the Java VM that allows a low-privileged user with Create Procedure privilege and network access via multiple protocols to compr...

6.5CVSS6AI score0.00179EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/19 8:38 p.m.11 views

CVE-2022-21498

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

6.5CVSS6.1AI score0.00179EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/19 8:36 p.m.14 views

CVE-2022-21411

Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

5.4CVSS5.2AI score0.00175EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/19 8:36 p.m.13 views

CVE-2022-21411

Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

5.4CVSS5.5AI score0.00175EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/19 5:59 a.m.26 views

Security Bulletin: IBM Emptoris Program Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Program Management supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecified vulnerability in...

4CVSS3.8AI score0.00753EPSS
Exploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/19 5:57 a.m.33 views

Security Bulletin: IBM Emptoris Sourcing is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Sourcing supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecified vulnerability in Oracle...

4CVSS3.8AI score0.00753EPSS
Exploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/19 5:55 a.m.24 views

Security Bulletin: IBM Emptoris Contract Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Contract Management supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecified vulnerability i...

4CVSS3.8AI score0.00753EPSS
Exploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/19 5:54 a.m.32 views

Security Bulletin: IBM Emptoris Strategic Supply Management Platform is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)

Summary IBM Emptoris Strategic Supply Management Platform supports usage of Oracle Database Server as a backend application database. Oracle Database Server is vulnerable to unspecified vulnerabilities that has been addressed. Vulnerability Details CVEID: CVE-2021-35576 DESCRIPTION: An unspecifie...

4CVSS3.8AI score0.00753EPSS
Exploits5Affected Software1
CNNVD
CNNVD
added 2022/04/19 12:0 a.m.2 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation. Oracle Database Server is vulnerable to an input validation error in the Java VM in Oracle Database Server. An authenticated remote attacker could exploit this vulnerability to manipulate data...

6.5CVSS8AI score0.00179EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/04/19 12:0 a.m.2 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, etc. An input validation error vulnerability exists in Oracle Database, which originates from an input validation error i...

7.2CVSS8.5AI score0.01226EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/04/19 12:0 a.m.2 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation. Java VM is one of the Java Virtual Machine components.An input validation error vulnerability exists in the RDBMS Gateway/Generic ODBC connection component of Oracle Database Server, which originates from...

5.5CVSS8AI score0.00175EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.1 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read data.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data through network packets...

4CVSS6.3AI score0.00202EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.1 views

The vulnerability of the Java VM component of the Oracle Database Server system allows a hacker to cause partial service disruption.

The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service outage using network packets...

4.3CVSS6.4AI score0.00435EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/04/12 5:15 p.m.11 views

CVE-2022-27670

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...

6.5CVSS0.00469EPSS
Exploits0References2
Prion
Prion
added 2022/04/12 5:15 p.m.14 views

Code injection

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers...

4CVSS6.5AI score0.00469EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder