CVE-2020-2512

CVE-2020-2512 is a vulnerability in the Database Gateway for ODBC component of Oracle Database Server . Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. An unauthenticated attacker with network access via OracleNet can trigger a hang or frequently repeatable crash (complete DoS) o...

CVE-2021-2234

CVE-2021-2234 affects Oracle Database Server (Java VM component). Affected: 12.1.0.2, 12.2.0.1, 18c, 19c. Vulnerability allows a low-privilege user with Create Session and network access via Oracle Net to compromise the Java VM, with potential for unauthorized creation/deletion/modification of da...

CVE-2024-21174

CVE-2024-21174 affects Oracle Database Server's Java VM component across 19.3–19.23, 21.3–21.14, and 23.4. The root cause is improper resource clearance/release in the Java VM, allowing a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net...

CVE-2026-71064

A critical (CVSS 9.6) unauthenticated vulnerability in Oracle Database Server's Portable Clusterware component affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An attacker on the adjacent network segment can take over Portable Clusterware with scope change impacting other products. No...

CVE-2007-5897

Buffer overflow in Oracle Database Server (MDSYS.SDO_CS) allows remote authenticated users to crash the server and execute arbitrary code via the TRANSFORM function. Affected: Oracle 8iR3, 9iR1/2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4. Note: this CVE may be related to CVE-2007-5515, CVE-2007-550...

CVE-2011-0805

Oracle Database Server UIX component vulnerability CVE-2011-0805 affects 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1. The issue is described as an unspecified remote vulnerability that can impact integrity via unknown vectors. Red Hat and Nessus references confirm the UIX component as affected. Th...

CVE-2019-2516

The CVE-2019-2516 issue affects Oracle Database Server’s Portable Clusterware. Affected: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c. Root cause: vulnerability in Portable Clusterware that enables a high-privilege Grid Infrastructure User with local logon to compromise Portable Clusterware, potentially tak...

CVE-2009-1015

CVE-2009-1015 is an unspecified vulnerability in Oracle Database Core RDBMS affecting 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4. The vulnerability allows remote authenticated users to affect integrity via unknown vectors. Oracle’s July 2009 CPU addresses this and other fixes; affected products/v...

CVE-2011-0804

CVE-2011-0804 affects Oracle Database Server via the Database Vault component across versions 10.2.0.3–11.2.0.2. The impact is confidentiality and integrity with unknown vectors and requires remote authenticated access (per CVE entry and NVD entry). Oracle’s April 2011 CPU advisory documents this...

CVE-2011-0852

CVE-2011-0852 affects Oracle Database Server components (10.1.0.5, 10.2.0.3, 10.2.0.4) and Oracle Enterprise Manager Grid Control 10.1.0.6, via Audit Administration in the Security Management module. Affects confidentiality, integrity, and availability; vulnerabilities are described as unspecifie...

CVE-2011-2238

Technical details about CVE-2011-2238 are not provided in the connected documents. The OpenVAS NASL entry and ENISA EUVD record list the vulnerability generically without specifics. Monitor for updates from official advisories.

CVE-2019-2517

CVE-2019-2517 affects Oracle Database Server’s Core RDBMS component (versions 12.2.0.1 and 18c). The vulnerability can be exploited remotely via Oracle Net by a high-privileged attacker with DBFS_ROLE to compromise the Core RDBMS, potentially taking over the component and impacting related produc...

CVE-2010-0901

CVE-2010-0901 affects Oracle Database Server Export component (versions 9.2.0.8/9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1). The issue allows remote authenticated users to affect confidentiality via Unknown vectors related to Select Any Dictionary. The Oracle July 2010 CPU document lists C...

CVE-2015-2599

CVE-2015-2599 affects Oracle Database Server (RDBMS Scheduler component). Affected versions include 11.1.0.7, 11.2.0.3/11.2.0.4, 12.1.0.1/12.1.0.2. The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors. NVD notes a Network attack vector with Low complex...

CVE-2024-21066

CVE-2024-21066 affects Oracle Database Server RDBMS component. Affected versions are 19.3–19.22 and 21.3–21.13. The issue allows a high-privileged, authenticated user with logon access to compromise the RDBMS, with human interaction required. Exploitation is described as feasible by an authentica...

CVE-2008-1817

CVE-2008-1817 affects Oracle Database versions 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 with remote attack vectors in (1) SDO_IDX (Spatial) and (2) Core RDBMS (DB10). The issue is described as multiple unspecified vulnerabilities with unknown impact; Oracle’s CPU notes ...

CVE-2011-0793

CVE-2011-0793 affects Oracle Database Server, specifically the Database Vault component, with affected versions: 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1. The vulnerability is described as “unspecified” and a remote authenticated user could impact integrity and availability , with the...

CVE-2026-46833

CVE-2026-46833 : Vulnerability in the Net Service component of Oracle Database Server. Affects supported versions 23.4.0–23.26.2. The issue allows an unauthenticated attacker with network access via TLS to compromise Net Service, with potential scope changes to impact additional products and poss...

CVE-2010-2411

CVE-2010-2411 affects Oracle Database Server (11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5) with a vulnerability in SYS.DBMS_IJOB that allows remote authenticated users to impact confidentiality, integrity and availability. The vulnerability is listed in the Oracle October 2010 CPU, which fix...

CVE-2010-4413

Oracle Database Server Scheduler Agent vulnerability (CVE-2010-4413) affects Oracle 11.1.0.7 and 11.2.0.1; remote authenticated users could impact confidentiality, integrity, and availability via unknown vectors. The connected sources indicate this CVE is among fixes in the January 2011 Oracle CP...

CVE-2011-2243

CVE-2011-2243 affects Oracle Database Server Core RDBMS Component (versions 11.1.0.7.3, 11.2.0.1, 11.2.0.2). The issue is described as an unspecified vulnerability that allows remote authenticated users to affect integrity, related to SYSDBA. The provided documents do not include concrete root-ca...

CVE-2018-2680

Oracle Database Server Java VM component vulnerability (CVE-2018-2680) affects 11.2.0.4, 12.1.0.2 and 12.2.0.1. The issue is described as a vulnerability in the Java VM that can be exploited by an unauthenticated attacker with network access via multiple protocols; however, successful exploitatio...

CVE-2019-2547

CVE-2019-2547 affects Oracle Database Server’s Java VM component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. The vulnerability can be exploited by a low-privileged attacker with Create Session and Create Procedure privileges over network protocols; exploitation requires user inte...

CVE-2011-2244

CVE-2011-2244 affects Oracle Database Server versions 10.1.0.5, 10.2.x, 11.1.x, 11.2.x and Enterprise Manager Grid Control 10.1.x–11.1.x, as well as related components. The vulnerability is described as unspecified in the Security Framework component, with impact on confidentiality and integrity ...

CVE-2014-6455

CVE-2014-6455 describes an unspecified vulnerability in the SQLJ component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 that allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Connected sources c...

CVE-2015-4900

CVE-2015-4900 is an Oracle Database Server issue affecting the XDB - XML Database component in versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. ...

CVE-2020-2517

CVE-2020-2517 affects Oracle Database Server (Database Gateway for ODBC). A high-privilege attacker with Create Procedure and Create Database Link privileges over OracleNet can compromise the gateway, enabling unauthorized updates/inserts/deletes and a partial denial of service. Affected versions...

CVE-2008-0346

Technical details about CVE-2008-0346 are not publicly provided in the supplied connected documents. The entries reference Oracle Application Server Jinitiator but do not specify vulnerable components, versions, impact, or fixes. Monitor for updates.

CVE-2010-4421

CVE-2010-4421 concerns Oracle Database Server’s Database Vault component (versions 10.2.0.3–11.2.0.1). The connected ThreatPost coverage notes it is remotely exploitable over HTTP without authentication, allowing impacts to confidentiality, integrity, and availability. The CVE is addressed in Ora...

CVE-2011-0882

Technical details for CVE-2011-0882 are not publicly provided in the supplied documents. Monitor for updates from connected sources; no specific impact, affected product scope, or remediation available here.

CVE-2011-2240

CVE-2011-2240 affects Oracle Database Server 10.1.0.5, specifically the Oracle Universal Installer component. The vulnerability is described as unspecified and allows local users to affect confidentiality via unknown vectors; no exploit details are provided in the documents. Public references poi...

CVE-2011-2242

CVE-2011-2242 concerns Oracle Database Server core RDBMS components. The CVE describes an unspecified vulnerability in Oracle Database Server 11.2.0.1 and 11.2.0.2, local-access impact on confidentiality related to XML DB FTP. The core issue is within the Core RDBMS component (XML DB FTP pathway)...

CVE-2015-0373

CVE-2015-0373 is an unspecified vulnerability in the Oracle Database Server OJVM component affecting Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue allows remote authenticated users to impact confidentiality, integrity, and availability via unknown...

CVE-2008-2590

Oracle’s CVE-2008-2590 affects Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 in the Instance Management component. The vulnerability is described as unspecified with unknown impact and requires a valid HTTP session, i.e., it is network-exposed but not openly exploit-able without authen...

CVE-2014-2406

The CVE-2014-2406 entry concerns Oracle Database Server Core RDBMS, affecting Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality, integrity, and availability via u...

CVE-2014-6546

CVE-2014-6546 affects Oracle Database Server’s JPublisher component across versions 11.1.0.7, 11.2.0.3/4, and 12.1.0.1/2. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The connected sources corroborate the affected ...

CVE-2014-6560

The CVE-2014-6560 entry describes an unspecified vulnerability in the Java VM component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. It allows remote authenticated users to affect confidentiality, integrity, and availability, via unknown vectors, and is...

CVE-2008-0345

CVE-2008-0345 : The Connected documents confirm an unspecified vulnerability in the Core RDBMS component of Oracle Database 11.1.0.6. The description provides no detail on the exact affected sub-component, root cause, impact, or exploitation method, only stating “unknown impact” and “remote attac...

CVE-2010-2412

CVE-2010-2412 is an OLAP-component vulnerability in Oracle Database Server 11.1.0.7. It requires authentication and is exploitable over the network to affect confidentiality and integrity; there is no reported impact on availability. The Nessus/CPU documentation associates this CVE with the OLAP ...

CVE-2011-0875

Oracle Database Server EMCTL Component Unspecified Vulnerability (CVE-2011-0875) affects EMCTL in Oracle Database Server 11.1.0.7 and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1. Root cause is an unspecified vulnerability allowing remote authenticated users to affect c...

CVE-2011-2231

CVE-2011-2231 affects Oracle Database Server components (versions 10.1.0.5, 10.2.0.3/4/5, 11.1.0.7, 11.2.0.1) and Oracle Fusion Middleware 10.1.3.5. The XML Developer Kit component harbors an unspecified vulnerability that could allow remote attackers to impact availability via unknown vectors. T...

CVE-2011-3525

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2011-3525. The Nessus entry for Oracle APEX CVE-2011-3525 describes an unspecified vulnerability in the APEX component that affects Oracle Database Server versions 3.2 and 4.0, allowing remote authenticated users to im...

CVE-2020-2969

CVE-2020-2969 affects Oracle Database Server’s Data Pump component. Affected versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue is exploitable by a high-privilege DBA account with network access via Oracle Net, potentially allowing takeover of Data Pump. CVSSv3.1 base score is 6.6 (C...

CVE-2008-1816

CVE-2008-1816 concerns Oracle Database 10.1.0.5 and 10.2.0.3 with multiple unspecified vulnerabilities, involving the Spatial component (SDO_UTIL, DB05) and the Audit component (fine-grained auditing, DB14). The documented impact is unknown and remote authenticated attack vectors are noted; Oracl...

CVE-2008-1821

CVE-2008-1821 affects Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 in the Advanced Queuing (AQ) component, related to SYS.DBMS_AQJMS_INTERNAL (DB15). The available description in the provided documents indicates an unspecified vulnerability with unknown impact and remote attack vectors, and mention...

CVE-2011-0838

Technical details about CVE-2011-0838 are not publicly provided in the provided documents; monitor for updates.

CVE-2014-4292

Technical details are not publicly available in the provided connected documents for CVE-2014-4292; monitor for updates.

CVE-2019-2571

CVE-2019-2571 affects Oracle Database Server’s RDBMS DataPump component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. The issue, described as a high-privilege DBA-authenticated vulnerability exploitable over Oracle Net, can lead to takeover of the DataPump component. Root cause det...

CVE-2008-2608

CVE-2008-2608 affects Oracle Database 10.1.0.5 and 10.2.0.3 Data Pump, involving SYS.KUPF$FILE_INT. The vulnerability is exploitable via Oracle Net with Execute on SYS.KUPF$FILE_INT and requires authentication; impact is tied to availability (per CVSS data: Network, Low complexity, Single auth, P...

CVE-2008-2611

CVE-2008-2611 affects Oracle Database Core RDBMS (Oracle Net) and is tracked across multiple database releases: 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6. The vulnerability is in the Core RDBMS component with remote authentication required and no remote exploit without a...