Sploitus

31 exploited vulnerabilities in Oracle Database Server

Vulnerabilities with publicly known exploits

Vendors
Oracle, Alt Linux, Astra Linux, Debian, Netapp, Red Hat
With known exploits
31
Affected Oracle Database Server versions
All versions
Affected Oracle Application Server versions
= 10.1.2.0.2
Affected Oracle Collaboration Suite versions
= 9.0.4.2
Affected Fasterxml Jackson-databind versions
< 2.6.7.2, 2.7.9.2, 2.8.10, 2.9.0
Affected Oracle Advanced Networking Option versions
= 12.1.0.2, 12.2.0.1, 19c
Affected Oracle Agile Engineering Data Management versions
= 6.2.1.0
Affected Oracle Agile Plm versions
= 9.3.6
Affected Oracle Agile Product Lifecycle Management For Process versions
= 6.2.2.0, 6.2.3.0

Vulnerabilities with exploits

Highest CVSS first — 15 of these already have exploit code on Sploitus

CVE-2006-1869
CVSS 10.0 HIGH 2006-04-20
CVE-2006-1867
CVSS 10.0 HIGH 2006-04-20
CVE-2006-0283
CVSS 10.0 HIGH 2006-01-18
CVE-2006-0265
CVSS 10.0 HIGH 2006-01-18
CVE-2006-0260
CVSS 10.0 HIGH 2006-01-18
CVE-2005-3438 4 exploits
CVSS 10.0 HIGH 2005-11-02
Oracle Security Component sys.pbsde buffer overflowOracle Security Component sys.pbsde buffer overflow
CVE-2017-15095 2 exploits
CVSS 9.8 CRITICAL 2017-11-16
Exploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-DatabindExploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-Databind
CVE-2006-1866
CVSS 9.7 HIGH 2006-04-20
CVE-2006-1876
CVSS 9.0 HIGH 2006-04-20
CVE-2006-1873
CVSS 9.0 HIGH 2006-04-20FIX AVAILABLE
CVE-2006-1870
CVSS 9.0 HIGH 2006-04-20FIX AVAILABLE
CVE-2021-2351 4 exploits
CVSS 8.3 HIGH 2021-03-02FIX AVAILABLE
Oracle Database Weak NNE Integrity Key Derivation VulnerabilityOracle Database Protection Mechanism Bypass Vulnerability
CVE-2010-3600 4 exploits
CVSS 7.5 HIGH 2011-01-18
Oracle Database Client System Analyzer Arbitrary File UploadOracle Database Client System Analyzer - Arbitrary File Upload (Metasploit)
CVE-2006-1874
CVSS 7.5 HIGH 2006-04-20FIX AVAILABLE
CVE-2006-1872
CVSS 7.5 HIGH 2006-04-20
CVE-2006-1868
CVSS 7.5 HIGH 2006-04-20FIX AVAILABLE
CVE-2006-1877
CVSS 7.2 HIGH 2006-04-20
CVE-2014-6577
CVSS 6.8 MEDIUM 2015-01-21FIX AVAILABLE
CVE-2006-1871
CVSS 6.5 MEDIUM 2006-04-20FIX AVAILABLE
CVE-2004-0637 1 exploit
CVSS 6.5 MEDIUM 2004-09-02FIX AVAILABLE
Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation
CVE-2012-3137 5 exploits
CVSS 6.4 MEDIUM 2012-09-21FIX AVAILABLE
Exploit for Improper Authentication in Oracle Database_ServerOracle Database Attacking Tool: ODAT
CVE-2006-7141 1 exploit
CVSS 6.0 MEDIUM 2007-03-07
Oracle 9i/10g - 'utl_file' FileSystem Access
CVE-2018-3004
CVSS 5.3 MEDIUM 2018-07-18FIX AVAILABLE
CVE-2008-6065 1 exploit
CVSS 5.1 MEDIUM 2009-02-05
Oracle Database Server 11.1 - 'CREATE ANY Directory' Privilege Escalation
CVE-2005-0701 1 exploit
CVSS 5.0 MEDIUM 2005-03-07FIX AVAILABLE
Oracle Database 8i/9i - Multiple Directory Traversal Vulnerabilities
CVE-2010-2415 3 exploits
CVSS 4.9 MEDIUM 2010-05-19
Oracle DB SQL Injection Via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SETOracle数据库CREATE_CHANGE_SET过程SQL注入漏洞
CVE-2006-2081 4 exploits
CVSS 4.6 MEDIUM 2006-04-27FIX AVAILABLE
Oracle DB SQL Injection Via DBMS_EXPORT_EXTENSIONOracle DB SQL Injection via DBMS_EXPORT_EXTENSION
CVE-2021-2173 3 exploits
CVSS 4.1 MEDIUM 2021-04-20FIX AVAILABLE
Oracle DB Broken PDB Isolation / Metadata Exposure VulnerabilityOracle DB Broken PDB Isolation / Metadata Exposure
CVE-2021-2175 2 exploits
CVSS 4.0 MEDIUM 2021-04-20
Oracle Database Vault Metadata Exposure VulnerabilityOracle Database Vault Metadata Exposure
CVE-2006-2505 2 exploits
CVSS 3.6 LOW 2006-05-22FIX AVAILABLE
Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL InjectionOracle 10g Release 2 - 'DBMS_EXPORT_EXTENSION' SQL
CVE-2023-22074 1 exploit
CVSS 3.3 LOW 2023-10-17FIX AVAILABLE
Oracle 19c / 21c Sharding Component Password Hash Exposure