Login Request a demo
RD
Product
Rest Data Services
by Oracle · last CVE May 28, 2026
On CISA KEVExploited in the wild
32
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities32In the news0Timeline
Severity mix
Critical 5High 5Medium 21Low 1
Severity
All severities32Critical5High5Medium21Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Rest Data Services to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2026-46840
10.0
1%
May 28
Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service)
Affected: 24.2.0 through 26.1.0
CVE-2026-46839
9.9
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-46775
9.9
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2017-7658
9.8
19%
Jun 26
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2017-7657
9.8
15%
Jun 26
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2026-35277
8.1
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-35266
7.9
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-46829
7.5
0%
May 28
Vulnerability in Oracle REST Data Services (component: Mongoapi)
Affected: 24.2.0 through 26.1.0
CVE-2021-28165
7.5
54%
Apr 1
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame
Affected: before 21.3
CVE-2017-9735
7.5
6%
Jun 16
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2020-14744
6.5
1%
Oct 21
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General)
Affected: before 20.2.1; 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2025-30756
6.1
0%
Jul 15
Vulnerability in Oracle REST Data Services (component: General)
Affected: 24.2.0
CVE-2021-41184
6.1
41%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: before 22.1.1; 22.1.1
CVE-2021-41183
6.1
9%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: before 22.1.1; 22.1.1
CVE-2021-41182
6.1
39%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: before 22.1.1; 22.1.1
CVE-2019-10241
6.1
9%
Apr 22
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2021-32014
5.5
1%
Jul 19
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js
Affected: before 21.2.4
CVE-2021-32013
5.5
1%
Jul 19
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js…
Affected: before 21.2.4
CVE-2021-32012
5.5
1%
Jul 19
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js…
Affected: before 21.2.4
CVE-2026-46843
5.3
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-46842
5.3
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-46841
5.3
0%
May 28
Vulnerability in Oracle REST Data Services (component: General)
Affected: 24.2.0 through 26.1.0
CVE-2026-46830
5.3
0%
May 28
Vulnerability in Oracle REST Data Services (component: Mongoapi)
Affected: 24.2.0 through 26.1.0
CVE-2021-34429
5.3
99%
Jul 15
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or…
Affected: before 22.1.1
CVE-2021-28169
5.3
78%
Jun 9
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the…
Affected: before 21.3
CVE-2020-27223
5.3
78%
Feb 26
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of…
Affected: before 20.4.3.050.1904
CVE-2019-10246
5.3
4%
Apr 22
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: before 21.2; 21.3
CVE-2020-27218
4.8
8%
Nov 28
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests…
Affected: before 20.4.3.050.1904
CVE-2020-14745
4.3
1%
Oct 21
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General)
Affected: before 20.2.1; 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
CVE-2021-34428
3.5
1%
Jun 22
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in…
Affected: before 21.3
Showing 32