CVE-2024-21093

The CVE-2024-21093 entry concerns the Java VM component of Oracle Database Server. Affected are Oracle Database Server versions 19.3–19.22 and 21.3–21.13. The issue allows a low-privileged user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, with ...

CVE-2025-30736

CVE-2025-30736 affects Oracle Database Server's Java VM component. Affected versions: 19.3–19.26, 21.3–21.17, and 23.4–23.7. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the Java VM, potentially leading to unauthorized creation, del...

CVE-2025-21553

CVE-2025-21553 affects Oracle Database Server Java VM. Affected versions: 19.3–19.25, 21.3–21.16, 23.4–23.6. The issue enables a low-privilege user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, potentially enabling unauthorized updates/deletes a...

CVE-2022-39429

The CVE-2022-39429 entry affects Oracle Database Server’s Java VM component on 19c and 21c. The vulnerability is exploitable by a low-privilege attacker with Create Procedure privilege and network access via Oracle Net, enabling partial denial of service of the Java VM. This conclusion is support...

CVE-2021-35619

CVE-2021-35619 is a vulnerability in the Java VM component of Oracle Database Server affecting Oracle versions 12.1.0.2, 12.2.0.1, 19c and 21c. The issue allows a low-privilege attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM, with successful at...

CVE-2022-39419

Oracle Database Server’s Java VM component (19c and 21c) is affected by CVE-2022-39419. A low-privilege attacker with Create Procedure privilege and network access via Oracle Net can read a subset of Java VM data due to a vulnerability in the Java VM component. The issue is documented across mult...

CVE-2021-2438

CVE-2021-2438 affects the Java VM component of Oracle Database Server. Affected versions include Oracle 12.1.0.2, 12.2.0.1, and 19c. A low-privileged attacker with Create Procedure privilege and network access via Oracle Net can exploit this to cause partial denial of service of the Java VM. The ...

CVE-2020-14743

CVE-2020-14743 is a vulnerability in the Oracle Database Server Java VM component affecting 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue allows a low-privileged attacker with Create Procedure privilege and network access via multiple protocols to compromise the Java VM, potentially leadi...

CVE-2026-21975

The CVE-2026-21975 entry describes a vulnerability in the Java VM component of Oracle Database Server. Affected: Oracle Database Server Java VM , versions 19.3-19.29 and 21.3-21.20 . Root cause: vulnerability in the Java VM allows a high privileged attacker with Authenticated User privilege and n...

CVE-2025-50069

CVE-2025-50069 affects the Java VM component of Oracle Database Server. Affected versions are 19.3–19.27 and 21.3–21.18. An attacker with Create Session and Create Procedure privileges and network access via Oracle Net can exploit the Java VM to gain unauthorized access to data or data across all...

CVE-2026-35229

CVE-2026-35229 concerns the Java VM component of Oracle Database Server, affecting 19.3–19.30 and 21.3–21.21. An unauthenticated attacker with network access via Oracle Net can compromise the Java VM, potentially gaining unauthorized access to data or full Java VM data. CVSS v3.1 base score is 7....

CVE-2025-61881

The CVE-2025-61881 issue affects the Java VM component of Oracle Database Server. Affected: Oracle Database Server Java VM versions 19.3–19.28, 21.3–21.19, and 23.4–23.9. Root cause: a vulnerability that allows an unauthenticated attacker with network access via Oracle Net to compromise the Java ...