Database Server vulnerabilities

14 known vulnerabilities in Database Server from Oracle. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Oracle Database Server: Improper Access Control

  CVE-2026-83088Sep 15, 2026Oracle

  Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to c

• 9.1 Critical severity

  Oracle Database Server: Improper Access Control

  CVE-2026-71102Aug 18, 2026Oracle

  Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 9.6 Critical severity

  Oracle Database Server: Improper Access Control

  CVE-2026-71064Aug 18, 2026Oracle

  Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical comm

• 9.6 Critical severity

  Oracle Database Server: Improper Access Control

  CVE-2026-71063Aug 18, 2026Oracle

  Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical comm

• 8.5 High severity

  Oracle Database Server: Improper Access Control

  CVE-2026-71062Aug 18, 2026Oracle

  Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to

• 9.9 Critical severity

  Oracle Database Server: Improper Access Control

  CVE-2026-61211Jul 21, 2026Oracle

  Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMS_CLOUD privilege with network access via

• 8.8 High severity

  Oracle Database Server: Improper Privilege Management

  CVE-2026-60175Jul 21, 2026Oracle

  Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network

• 8.2 High severity

  Oracle Database Server: Uncontrolled Resource Consumption

  CVE-2026-47046Jul 21, 2026Oracle

  Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks

• 9.1 Critical severity

  Oracle Net Services: Missing Authentication for Critical Functionality

  CVE-2026-47040Jul 21, 2026Oracle

  Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Ne

• 7.5 High severity

  Oracle Database Server: Uncontrolled Resource Consumption

  CVE-2026-46835May 28, 2026Oracle

  Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. Successful at

• 7.5 High severity

  Oracle Database Server: Uncontrolled Resource Consumption

  CVE-2026-46834May 28, 2026Oracle

  Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. Successful at

• 8.8 High severity

  Oracle Database Server: Incorrect Authorization

  CVE-2025-30751Jul 15, 2025Oracle

  Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with netwo

• 7.2 High severity

  Database - Enterprise Edition: Execution with Unnecessary Privileges

  CVE-2024-21184Jul 16, 2024Oracle

  Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19.3-19.23. Easily exploitable vulnerability allows high privileged attacker having Execute on SYS.XS_DIAG privilege with network

• 7.5 High severity

  Data Provider for .NET: Improper Access Control

  CVE-2023-21893Jan 18, 2023Oracle

  Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle D