Oracle Database Server vulnerabilities

27 known vulnerabilities in Oracle Database Server from Oracle. 27 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

27vulnerabilities

4critical

23high

0exploited

8.2average CVSS score

Latest first

7.7 High severity
Oracle Database Server: Improper Access Control
CVE-2026-91568Oct 20, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compr
8.1 High severity
Oracle Database Server: Improper Access Control
CVE-2026-91503Oct 20, 2026Oracle
Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access
8.8 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-91499Oct 20, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromi
8.1 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-83351Sep 15, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attac
7.5 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-83350Sep 15, 2026Oracle
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to comprom
7.5 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-83349Sep 15, 2026Oracle
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Ne
8.8 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-83348Sep 15, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network acc
7.5 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-83333Sep 15, 2026Oracle
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net
8.5 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-83272Sep 15, 2026Oracle
Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with netwo
8.8 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-83271Sep 15, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Execute on DBMS_REDEFINITION privilege wi
8.8 High severity
Oracle Database Server: Improper Access Control
CVE-2026-83160Sep 15, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to comprom
7.5 High severity
Oracle Database Server: Improper Access Control
CVE-2026-83156Sep 15, 2026Oracle
Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with
7.7 High severity
Oracle Database Server: Improper Access Control
CVE-2026-83088Sep 15, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to c
9.1 Critical severity
Oracle Database Server: Improper Access Control
CVE-2026-71102Aug 18, 2026Oracle
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to
9.6 Critical severity
Oracle Database Server: Improper Access Control
CVE-2026-71064Aug 18, 2026Oracle
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical comm
9.6 Critical severity
Oracle Database Server: Improper Access Control
CVE-2026-71063Aug 18, 2026Oracle
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical comm
8.5 High severity
Oracle Database Server: Improper Access Control
CVE-2026-71062Aug 18, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to
9.9 Critical severity
Oracle Database Server: Improper Access Control
CVE-2026-61211Jul 21, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMS_CLOUD privilege with network access via
8.8 High severity
Oracle Database Server: Improper Privilege Management
CVE-2026-60175Jul 21, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network
8.2 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-47046Jul 21, 2026Oracle
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks
7.5 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-46835May 28, 2026Oracle
Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. Successful at
7.5 High severity
Oracle Database Server: Uncontrolled Resource Consumption
CVE-2026-46834May 28, 2026Oracle
Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Net Service. Successful at
7.5 High severity
Oracle Database Server: Improper Access Control
CVE-2026-35229Apr 21, 2026Oracle
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Suc
7.7 High severity
Oracle Database Server: Improper Privilege Management
CVE-2025-50069Jul 15, 2025Oracle
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.27 and 21.3-21.18. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network
8.8 High severity
Oracle Database Server: Incorrect Authorization
CVE-2025-30751Jul 15, 2025Oracle
Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with netwo
7.4 High severity
Oracle Database Server: Improper Access Control
CVE-2025-30736Apr 15, 2025Oracle
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to co
7.3 High severity
Oracle Database Server: Incorrect Default Permissions
CVE-2025-30701Apr 15, 2025Oracle
Vulnerability in the RAS Security component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows low privileged attacker having User Account privilege with network acc