oracle rest data services

Name: oracle rest data services
Brand: oracle

productUS

cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical4high19medium1low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	no fix	2020-04-29	5 versions
CVE-2021-34429US	medium5.3OT high	99.3% (100th)	Exploit	22.1.1	2021-07-15	< 22.1.1
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2024-2961US	—	88.3% (100th)	Exploit	no fix	2024-04-17	—
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	5 versions
CVE-2020-27223US	medium5.3	78.0% (100th)	Exploit	20.4.3.050.1904	2021-02-26	< 20.4.3.050.1904
CVE-2021-28165US	high7.5	53.9% (99th)	Exploit	21.3	2021-04-01	< 21.3
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	22.1.1	2021-10-26	2 versions
CVE-2021-41182US	medium6.1	39.4% (99th)	Exploit	22.1.1	2021-10-26	2 versions
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	21.2	2021-04-13	2 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 21.2.4
CVE-2024-28757US	high7.5	2.01% (81st)	Exploit	no fix	2024-03-10	—
CVE-2024-22262US	—	1.19% (68th)	Exploit	no fix	2024-04-16	—
CVE-2021-34428US	low3.5	0.96% (61st)	Exploit	21.3	2021-06-22	< 21.3
CVE-2021-28169US	medium5.3	78.5% (100th)	—	21.3	2021-06-09	< 21.3
CVE-2017-7658US	critical9.8	19.4% (97th)	—	no fix	2018-06-26	4 versions
CVE-2017-7657US	critical9.8	14.9% (97th)	—	no fix	2018-06-26	4 versions
CVE-2019-10241US	medium6.1	9.37% (95th)	—	no fix	2019-04-22	4 versions
CVE-2021-41183US	medium6.1	8.53% (95th)	—	22.1.1	2021-10-26	2 versions
CVE-2020-27218US	medium4.8	8.28% (95th)	—	20.4.3.050.1904	2020-11-28	< 20.4.3.050.1904
CVE-2017-9735US	high7.5	5.79% (93rd)	—	no fix	2017-06-16	4 versions
CVE-2019-10246US	medium5.3	4.09% (91st)	—	no fix	2019-04-22	4 versions
CVE-2020-14744US	medium4.0	1.30% (70th)	—	20.2.1	2020-10-21	6 versions
CVE-2020-14745US	medium4.0	0.96% (61st)	—	20.2.1	2020-10-21	6 versions
CVE-2021-32014US	medium5.5OT elevated	0.88% (59th)	—	21.2.4	2021-07-19	< 21.2.4
CVE-2021-32013US	medium5.5	0.88% (59th)	—	21.2.4	2021-07-19	< 21.2.4
CVE-2021-32012US	medium5.5	0.88% (59th)	—	21.2.4	2021-07-19	< 21.2.4
CVE-2023-52428US	high7.5	0.81% (57th)	—	no fix	2024-02-11	—
CVE-2026-46840US	—OT elevated	0.73% (54th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46775US	—	0.43% (37th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46839US	—	0.35% (29th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46829US	—	0.27% (20th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-35277US	—	0.27% (19th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46843US	—	0.26% (17th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46841US	—	0.21% (12th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46830US	—	0.21% (10th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2026-46842US	—	0.18% (8th)	—	no fix	2026-05-28	24.2.0 → 26.1.0
CVE-2025-30756US	—	0.14% (4th)	—	no fix	2025-07-15	= 24.2.0
CVE-2026-35266US	—	0.11% (2nd)	—	no fix	2026-05-28	24.2.0 → 26.1.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption11 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-284Improper Access Control5 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization2 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE34 CVEs
NLNCSC-NL (CSAF)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan