DS
Product
Database Server
530
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 24Medium 47Low 32
Watch
Add Database Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60175 | 8.8 | Jul 21 | Vulnerability in the RDBMS component of Oracle Database Server Affected: 19.3 through 19.31; 21.3 through 21.22; 23.4 through 23.26.2 |
| CVE-2025-30751 | 8.8 | Jul 15 | Vulnerability in the Oracle Database component of Oracle Database Server Affected: 19.3 through 19.27; 23.4 through 23.8 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 18c |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 18c |
| CVE-2026-71062 | 8.5 | Aug 18 | Vulnerability in the RDBMS component of Oracle Database Server Affected: 23.4.0 through 23.26.3 |
| CVE-2018-2841 | 8.5 | Apr 19 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18.1.0.0 |
| CVE-2018-2939 | 8.4 | Jul 18 | Vulnerability in the Core RDBMS component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18.1; 18.2 |
| CVE-2018-2680 | 8.3 | Jan 18 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1 |
| CVE-2026-47046 | 8.2 | Jul 21 | Vulnerability in the RDBMS component of Oracle Database Server Affected: 23.4 through 23.26.2 |
| CVE-2019-2516 | 8.2 | Apr 23 | Vulnerability in the Portable Clusterware component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c |
| CVE-2020-2968 | 8.0 | Jul 15 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2020-2735 | 8.0 | Apr 15 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2020-2511 | 7.7 | Jan 15 | Vulnerability in the Core RDBMS component of Oracle Database Server Affected: 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2019-2776 | 7.6 | Jul 23 | Vulnerability in the Core RDBMS component of Oracle Database Server Affected: 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2026-46835 | 7.5 | May 28 | Vulnerability in the Net Service component of Oracle Database Server Affected: 23.4.0 through 23.26.2 |
| CVE-2026-46834 | 7.5 | May 28 | Vulnerability in the Net Service component of Oracle Database Server Affected: 23.4.0 through 23.26.2 |
| CVE-2023-21893 | 7.5 | Jan 18 | Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server Affected: 19c; 21c |
| CVE-2020-2518 | 7.5 | Jan 15 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2020-2510 | 7.5 | Jan 15 | Vulnerability in the Core RDBMS component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2019-2799 | 7.5 | Jul 23 | Vulnerability in the Oracle ODBC Driver component of Oracle Database Server<span class=font-red><b> ***PRIVILEGE CANNOT BE NONE FOR AUTHENTICATED ATTACKS***</b></span> Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c |
| CVE-2019-2518 | 7.5 | Apr 23 | Vulnerability in the Java VM component of Oracle Database Server Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2016-2381 | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2024-21184 | 7.2 | Jul 16 | Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server Affected: 19.3 through 19.23 |
| CVE-2026-21939 | 7.0 | Jan 20 | Vulnerability in the SQLcl component of Oracle Database Server Affected: 23.4 through 23.26 |
Showing 24
The 500 most important CVEs for this product (exploited first, then by severity)
