RD
Product
Rest Data Services
by Oracle · last CVE May 28, 2026
On CISA KEVExploited in the wild
32
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 21Low 1
Watch

Add Rest Data Services to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35277
8.1
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-35266
7.9
0%
May 28
Vulnerability in Oracle REST Data Services (component: Core)
Affected: 24.2.0 through 26.1.0
CVE-2026-46829
7.5
0%
May 28
Vulnerability in Oracle REST Data Services (component: Mongoapi)
Affected: 24.2.0 through 26.1.0
CVE-2021-28165
7.5
54%
Apr 1
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame
Affected: before 21.3
CVE-2017-9735
7.5
6%
Jun 16
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before…
Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c
Showing 5