Login Request a demo
DS
Product
Database Server
by Oracle · last CVE Aug 18, 2026
530
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities530In the news0Timeline
Severity mix
Critical 18High 24Medium 47Low 32
Severity
All severities500Critical18High24Medium47Low32
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Database Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1953
10.0
6%
Mar 13
Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2026-61211
9.9
0%
Jul 21
Vulnerability in the RDBMS component of Oracle Database Server
Affected: 19.3 through 19.31; 23.4 through 23.26.2
CVE-2018-3110
9.9
2%
Aug 10
A vulnerability was discovered in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18
CVE-2019-16942
9.8
6%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.0.1; 18c; 19c
CVE-2018-14719
9.8
10%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2018-3259
9.8
3%
Oct 17
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2017-15095
9.8
8%
Feb 6
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending…
Affected: 12.2.0.1; 18.1
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: 18c
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 18c
CVE-2004-1363
9.8
9%
Aug 4
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
Affected: 8.1.7.4; 9.0.1.4; 9.0.1.5; 9.0.4; 9.2.0.4; 9.2.0.5; +1 more
CVE-2026-71064
9.6
0%
Aug 18
Vulnerability in the Portable Clusterware component of Oracle Database Server
Affected: 19.3 through 19.32; 21.3 through 21.23; 23.4.0 through 23.26.3
CVE-2026-71063
9.6
0%
Aug 18
Vulnerability in the Portable Clusterware component of Oracle Database Server
Affected: 19.3 through 19.32; 21.3 through 21.23; 23.4.0 through 23.26.3
CVE-2026-71102
9.1
0%
Aug 18
Vulnerability in the Portable Clusterware component of Oracle Database Server
Affected: 19.3 through 19.32; 21.3 through 21.23; 23.4.0 through 23.26.3
CVE-2026-47040
9.1
0%
Jul 21
Vulnerability in the Oracle Net Services component of Oracle Database Server
Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2
CVE-2019-2517
9.1
2%
Apr 23
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 12.2.0.1; 18c
CVE-2017-10282
9.1
2%
Jan 18
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 12.1.0.2; 12.2.0.1
CVE-2016-5555
9.1
2%
Oct 25
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability…
Affected: 11.2.0.4; 12.1.0.2
CVE-2026-46833
9.0
0%
May 28
Vulnerability in the Net Service component of Oracle Database Server
Affected: 23.4.0 through 23.26.2
CVE-2026-60175
8.8
0%
Jul 21
Vulnerability in the RDBMS component of Oracle Database Server
Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2
CVE-2025-30751
8.8
0%
Jul 15
Vulnerability in the Oracle Database component of Oracle Database Server
Affected: 19.3 through 19.27; 23.4 through 23.8
CVE-2016-9842
8.8
5%
May 23
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers
Affected: 18c
CVE-2016-9840
8.8
5%
May 23
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 18c
CVE-2026-71062
8.5
0%
Aug 18
Vulnerability in the RDBMS component of Oracle Database Server
Affected: 23.4.0 through 23.26.3
CVE-2018-2841
8.5
2%
Apr 19
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18.1.0.0
CVE-2018-2939
8.4
0%
Jul 18
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18.1; 18.2
CVE-2018-2680
8.3
2%
Jan 18
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1
CVE-2026-47046
8.2
0%
Jul 21
Vulnerability in the RDBMS component of Oracle Database Server
Affected: 23.4 through 23.26.2
CVE-2019-2516
8.2
0%
Apr 23
Vulnerability in the Portable Clusterware component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2020-2968
8.0
1%
Jul 15
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2020-2735
8.0
1%
Apr 15
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2020-2511
7.7
1%
Jan 15
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2019-2776
7.6
1%
Jul 23
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2026-46835
7.5
0%
May 28
Vulnerability in the Net Service component of Oracle Database Server
Affected: 23.4.0 through 23.26.2
CVE-2026-46834
7.5
0%
May 28
Vulnerability in the Net Service component of Oracle Database Server
Affected: 23.4.0 through 23.26.2
CVE-2023-21893
7.5
1%
Jan 18
Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server
Affected: 19c; 21c
CVE-2020-2518
7.5
1%
Jan 15
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2020-2510
7.5
2%
Jan 15
Vulnerability in the Core RDBMS component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2019-2799
7.5
1%
Jul 23
Vulnerability in the Oracle ODBC Driver component of Oracle Database Server<span class=font-red><b> ***PRIVILEGE CANNOT BE NONE FOR AUTHENTICATED ATTACKS***</b></span>
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2019-2518
7.5
1%
Apr 23
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2016-2381
7.5
9%
Apr 8
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2024-21184
7.2
1%
Jul 16
Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server
Affected: 19.3 through 19.23
CVE-2026-21939
7.0
0%
Jan 20
Vulnerability in the SQLcl component of Oracle Database Server
Affected: 23.4 through 23.26
CVE-2026-47045
6.8
0%
Jul 21
Vulnerability in the JDBC component of Oracle Database Server
Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2
CVE-2019-2909
6.8
1%
Oct 16
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2019-2749
6.8
1%
Jul 23
Vulnerability in the Java VM component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2021-2332
6.7
1%
Oct 20
Vulnerability in the Oracle LogMiner component of Oracle Database Server
Affected: 12.1.0.2; 12.2.0.1; 19c
CVE-2020-2969
6.6
2%
Jul 15
Vulnerability in the Data Pump component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2019-2571
6.6
1%
Apr 23
Vulnerability in the RDBMS DataPump component of Oracle Database Server
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2026-47060
6.5
0%
Jul 21
Vulnerability in the JDBC component of Oracle Database Server
Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2
CVE-2026-47039
6.5
0%
Jul 21
Vulnerability in the Java VM component of Oracle Database Server
Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)