Oracle Corporation Oracle Database Server

Name: Oracle Corporation Oracle Database Server
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical16high17medium1low

updated 2026-10-28

vulnerabilities (86)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	3 versions
CVE-2025-24813US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2025-03-10	3 versions
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	3 versions
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	no fix	2022-11-01	3 versions
CVE-2020-13935US	high7.5	86.6% (100th)	Exploit	no fix	2020-07-14	3 versions
CVE-2024-38819US	—	56.0% (99th)	Exploit	no fix	2024-12-19	3 versions
CVE-2020-9484US	high7.0	55.5% (99th)	Exploit	no fix	2020-05-20	3 versions
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	no fix	2021-10-26	3 versions
CVE-2020-11996US	high7.5	26.7% (98th)	Exploit	no fix	2020-06-26	3 versions
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	3 versions
CVE-2023-41080US	medium6.1	6.46% (94th)	Exploit	no fix	2023-08-25	3 versions
CVE-2024-8176US	—	1.35% (71st)	Exploit	no fix	2025-03-14	3 versions
CVE-2024-38820US	medium5.3	0.62% (49th)	Exploit	no fix	2024-10-18	3 versions
CVE-2024-13176US	—	0.61% (49th)	Exploit	no fix	2025-01-20	3 versions
CVE-2024-36114US	—	0.50% (43rd)	Exploit	no fix	2024-05-29	3 versions
CVE-2025-53051US	—	0.34% (27th)	Exploit	no fix	2025-10-21	≤ 23.4 ≤23.9
CVE-2021-33037US	medium5.3	74.7% (99th)	—	no fix	2021-07-12	3 versions
CVE-2020-13943US	medium4.3	55.0% (99th)	—	no fix	2020-10-12	3 versions
CVE-2021-24122US	medium5.9	22.9% (98th)	—	no fix	2021-01-14	3 versions
CVE-2021-25122US	high7.5	18.1% (97th)	—	no fix	2021-03-01	3 versions
CVE-2021-30640US	medium6.5	9.89% (96th)	—	no fix	2021-07-12	3 versions
CVE-2021-25329US	high7.0	9.49% (95th)	—	no fix	2021-03-01	3 versions
CVE-2020-1935US	medium4.8	9.39% (95th)	—	no fix	2020-02-24	3 versions
CVE-2022-25762US	high8.6	8.40% (95th)	—	no fix	2022-05-13	3 versions
CVE-2021-41079US	high7.5	7.18% (94th)	—	no fix	2021-09-16	3 versions
CVE-2023-45648US	medium5.3	5.88% (93rd)	—	no fix	2023-10-10	3 versions
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	3 versions
CVE-2024-47561US	—	3.26% (88th)	—	no fix	2024-10-03	3 versions
CVE-2021-42575US	critical9.8	2.97% (87th)	—	no fix	2021-10-18	3 versions
CVE-2023-46589US	high7.5	2.65% (86th)	—	no fix	2023-11-28	3 versions
CVE-2023-42795US	medium5.3	2.51% (85th)	—	no fix	2023-10-10	3 versions
CVE-2021-43980US	low3.7	2.36% (84th)	—	no fix	2022-09-28	3 versions
CVE-2024-23672US	—	2.31% (83rd)	—	no fix	2024-03-13	3 versions
CVE-2025-24970US	—	2.19% (82nd)	—	no fix	2025-02-10	3 versions
CVE-2024-11236US	critical9.8	2.07% (81st)	—	no fix	2024-11-24	3 versions
CVE-2024-11053US	—	1.97% (80th)	—	no fix	2024-12-11	3 versions
CVE-2023-28708US	medium4.3	1.83% (79th)	—	no fix	2023-03-22	3 versions
CVE-2024-11233US	high8.2	1.61% (76th)	—	no fix	2024-11-24	3 versions
CVE-2022-42252US	high7.5	1.57% (75th)	—	no fix	2022-11-01	3 versions
CVE-2024-47554US	—	1.31% (71st)	—	no fix	2024-10-03	3 versions
CVE-2024-39338US	high7.5	1.21% (68th)	—	no fix	2024-08-12	3 versions
CVE-2023-34053US	high7.5	1.16% (67th)	—	no fix	2023-11-28	3 versions
CVE-2024-37891US	medium6.5	1.14% (66th)	—	no fix	2024-06-17	3 versions
CVE-2024-11234US	high7.2	1.11% (66th)	—	no fix	2024-11-24	3 versions
CVE-2024-8184US	medium6.5	1.03% (64th)	—	no fix	2024-10-14	3 versions
CVE-2024-6763US	medium5.3	0.97% (62nd)	—	no fix	2024-10-14	3 versions
CVE-2024-38999US	—	0.84% (58th)	—	no fix	2024-07-01	3 versions
CVE-2025-26791US	medium6.1	0.60% (49th)	—	no fix	2025-02-14	3 versions
CVE-2024-57699US	—	0.59% (48th)	—	no fix	2025-02-05	3 versions
CVE-2025-30702US	—	0.56% (46th)	—	no fix	2025-04-15	4 versions

showing 50 of 86

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation15 CVEs
CWE-284Improper Access Control13 CVEs
CWE-400Uncontrolled Resource Consumption12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-269Improper Privilege Management5 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')5 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)57 CVEs
EUEU Vulnerability Database (ENISA)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan