FrançaisShown in its original language — a full translation is planned for a future version.
Multiples vulnérabilités dans Oracle Database Server
view advisory published 2026-10-21
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (44)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-91615US | medium6.3 | — | ||
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnera… | ||||
| CVE-2026-91568US | high7.7 | — | ||
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att… | ||||
| CVE-2026-91563US | high8.8 | — | ||
Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulne… | ||||
| CVE-2026-91503US | high8.1 | — | ||
Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability… | ||||
| CVE-2026-91499US | high8.8 | — | ||
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att… | ||||
| CVE-2026-91479US | medium6.5 | — | ||
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated at… | ||||
| CVE-2026-73964US | low2.7 | — | ||
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high p… | ||||
| CVE-2026-101512US | medium6.5 | — | ||
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att… | ||||
| CVE-2026-101510US | medium4.4 | — | ||
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitab… | ||||
| CVE-2026-93574US | medium6.5 | — | ||
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes… | ||||
| CVE-2026-93579US | medium6.5 | — | ||
A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 head… | ||||
| CVE-2026-93576US | high7.5 | — | ||
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote att… | ||||
| CVE-2026-93573US | medium6.5 | — | ||
A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header validation by splitting the `Transfer-Encoding` field… | ||||
| CVE-2026-93569US | high8.2 | — | ||
A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an abs… | ||||
| CVE-2026-93568US | high7.5 | — | ||
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's HTTP-object conversio… | ||||
| CVE-2026-93567US | high7.5 | — | ||
A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form re… | ||||
| CVE-2026-93566US | medium6.5 | — | ||
A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the chunk-size line. This bypass… | ||||
| CVE-2026-93565US | high7.5 | — | ||
A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requ… | ||||
| CVE-2026-93564US | high7.5 | — | ||
A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted PROXY-protocol v2 head… | ||||
| CVE-2026-93560US | high7.5 | — | ||
A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integ… | ||||
showing 20 of 44
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan