Rest Data Services vulnerabilities

7 known vulnerabilities in Rest Data Services from Oracle. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Oracle REST Data Services: Improper Access Control

  CVE-2026-46840May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data

• 9.9 Critical severity

  Oracle REST Data Services: Improper Access Control

  CVE-2026-46839May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While t

• 7.5 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-46829May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Su

• 9.9 Critical severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-46775May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While t

• 8.1 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-35277May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Success

• 7.9 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-35266May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Succe

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr