Oracle Corporation Oracle Database

Name: Oracle Corporation Oracle Database
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical15high19medium12low

updated 2026-10-28

vulnerabilities (51)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-2969US	medium6.6	2.03% (81st)	Exploit	no fix	2020-07-15	5 versions
CVE-2020-2978US	medium4.0	1.24% (69th)	Exploit	no fix	2020-07-15	4 versions
CVE-2018-3259US	critical9.8	3.33% (89th)	—	no fix	2018-10-17	4 versions
CVE-2018-3004US	medium5.3	2.62% (85th)	—	no fix	2018-07-18	4 versions
CVE-2018-3110US	critical9.9	2.45% (84th)	—	no fix	2018-08-10	4 versions
CVE-2017-10202US	critical9.9	2.31% (83rd)	—	no fix	2017-08-08	3 versions
CVE-2020-2510US	high7.5	2.12% (82nd)	—	no fix	2020-01-15	5 versions
CVE-2017-10282US	critical9.1	1.75% (78th)	—	no fix	2018-01-18	2 versions
CVE-2019-2406US	high7.2	1.73% (78th)	—	no fix	2019-01-16	3 versions
CVE-2018-2841US	high8.5	1.73% (78th)	—	no fix	2018-04-19	3 versions
CVE-2019-2517US	critical9.1	1.71% (77th)	—	no fix	2019-04-23	2 versions
CVE-2018-2680US	high8.3	1.69% (77th)	—	no fix	2018-01-18	3 versions
CVE-2017-3567US	medium5.3	1.50% (74th)	—	no fix	2017-04-24	2 versions
CVE-2020-2512US	medium5.9	1.47% (74th)	—	no fix	2020-01-15	5 versions
CVE-2019-2909US	medium6.8	1.35% (71st)	—	no fix	2019-10-16	5 versions
CVE-2020-2511US	high7.7	1.32% (71st)	—	no fix	2020-01-15	4 versions
CVE-2017-10261US	medium6.5	1.30% (70th)	—	no fix	2017-10-19	2 versions
CVE-2020-2518US	high7.5	1.26% (69th)	—	no fix	2020-01-15	5 versions
CVE-2019-2582US	medium5.3	1.23% (69th)	—	no fix	2019-04-23	2 versions
CVE-2019-2518US	high7.5	1.21% (68th)	—	no fix	2019-04-23	5 versions
CVE-2019-2571US	medium6.6	1.13% (66th)	—	no fix	2019-04-23	4 versions
CVE-2019-2939US	medium5.0	1.13% (66th)	—	no fix	2019-10-16	3 versions
CVE-2019-2913US	medium5.0	1.13% (66th)	—	no fix	2019-10-16	3 versions
CVE-2020-2735US	high8.0	1.13% (66th)	—	no fix	2020-04-15	5 versions
CVE-2019-2956US	medium5.7	1.12% (66th)	—	no fix	2019-10-16	4 versions
CVE-2020-2968US	high8.0	1.11% (66th)	—	no fix	2020-07-15	5 versions
CVE-2019-2749US	medium6.8	1.09% (65th)	—	no fix	2019-07-23	5 versions
CVE-2019-2547US	low3.5	1.03% (64th)	—	no fix	2019-01-16	4 versions
CVE-2020-2737US	medium6.4	1.03% (64th)	—	no fix	2020-04-15	5 versions
CVE-2020-2527US	medium4.1	0.98% (62nd)	—	no fix	2020-01-15	4 versions
CVE-2018-2875US	medium5.0	0.98% (62nd)	—	no fix	2019-10-16	3 versions
CVE-2020-2734US	low2.4	0.89% (59th)	—	no fix	2020-04-15	4 versions
CVE-2018-2575US	low2.0	0.89% (59th)	—	no fix	2018-01-18	3 versions
CVE-2019-2734US	medium4.3	0.84% (58th)	—	no fix	2019-10-16	3 versions
CVE-2020-2515US	medium5.0	0.79% (56th)	—	no fix	2020-01-15	5 versions
CVE-2020-2516US	low2.4	0.78% (56th)	—	no fix	2020-01-15	4 versions
CVE-2020-2517US	low3.3	0.77% (55th)	—	no fix	2020-01-15	5 versions
CVE-2020-2568US	low3.9	0.72% (54th)	—	no fix	2020-01-15	4 versions
CVE-2019-2444US	high8.2	0.44% (38th)	—	no fix	2019-01-16	2 versions
CVE-2017-10321US	high8.8	0.43% (38th)	—	no fix	2017-10-19	3 versions
CVE-2019-2619US	high8.2	0.42% (36th)	—	no fix	2019-04-23	4 versions
CVE-2019-2516US	high8.2	0.42% (36th)	—	no fix	2019-04-23	4 versions
CVE-2019-2569US	medium4.0	0.41% (35th)	—	no fix	2019-07-23	3 versions
CVE-2018-2939US	high8.4	0.41% (35th)	—	no fix	2018-07-18	5 versions
CVE-2017-10190US	high8.2	0.40% (34th)	—	no fix	2017-10-19	3 versions
CVE-2020-2731US	low3.9	0.40% (34th)	—	no fix	2020-01-15	4 versions
CVE-2019-2955US	low3.9	0.40% (34th)	—	no fix	2019-10-16	5 versions
CVE-2019-2954US	low3.9	0.40% (34th)	—	no fix	2019-10-16	5 versions
CVE-2019-2940US	low2.3	0.39% (33rd)	—	no fix	2019-10-16	3 versions
CVE-2017-10120US	low1.9	0.36% (30th)	—	no fix	2017-08-08	≤ 12.1.0.2

showing 50 of 51

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control18 CVEs
CWE-264CWE-26411 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-269Improper Privilege Management7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-266Incorrect Privilege Assignment4 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)51 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan