← Back

Database Server

database_server

Vendor: Oracle • 516 CVEs

CVEs (516)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-4755
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2015-4753
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the RDBMS Support Tools component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.
CVE-2015-4740
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and ava...Show more
Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.Show less
CVE-2015-2655
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2015-2629
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability v...Show more
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0457.Show less
CVE-2015-2599
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the RDBMS Scheduler component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2015-2595
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2015-2586
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors.
CVE-2015-2585
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors.
CVE-2015-0468
1Oracle
1Database Server
May 6, 2026
Jul 16, 2015
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vector...Show more
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.Show less
CVE-2015-0483
1Oracle
1Database Server
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2015-0479
1Oracle
1Database Server
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors.
CVE-2015-0457
1Oracle
1Database Server
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability v...Show more
Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2629.Show less
CVE-2015-0455
1Oracle
1Database Server
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2015-0373
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via...Show more
Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.Show less
CVE-2015-0371
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVE-2015-0370
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerabil...Show more
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2013-5858.Show less
CVE-2014-6578
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability v...Show more
Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT.Show less
CVE-2014-6577
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors....Show more
Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the original researcher's claim that this is an XML external entity (XXE) vulnerability in the XML parser, which allows attackers to conduct internal port scanning, perform SSRF attacks, or cause a denial of service via a crafted (1) http: or (2) ftp: URI.Show less
CVE-2014-6567
1Oracle
1Database Server
May 6, 2026
Jan 21, 2015
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availabilit...Show more
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.Show less