oracle big data spatial and graph

Name: oracle big data spatial and graph
Brand: oracle

productUS

cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high5medium0low

updated 2026-10-27

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	23.1	2021-10-26	2 versions
CVE-2021-41182US	medium6.1	39.4% (99th)	Exploit	23.1	2021-10-26	2 versions
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	23.1	2022-03-11	< 23.1
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 23.1
CVE-2019-5063US	high8.8	21.1% (98th)	—	2.0	2020-01-03	< 2.0
CVE-2021-42340US	high7.5	11.8% (96th)	—	23.1	2021-10-14	< 23.1
CVE-2019-5064US	high8.8	10.7% (96th)	—	2.0	2020-01-03	< 2.0
CVE-2021-41183US	medium6.1	8.53% (95th)	—	23.1	2021-10-26	2 versions
CVE-2021-30639US	high7.5	6.89% (94th)	—	23.1	2021-07-12	< 23.1
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	23.1	2021-07-21	< 23.1

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-384Session Fixation1 CVEs
CWE-459Incomplete Cleanup1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.