Known Vulnerabilities for Database Server by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Database Server" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125390 json | Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in FolderController::a... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-124479 json | OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document download, where the controller pass... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-124446 json | OpenEMR before 8.3.0 contains a path traversal vulnerability in the FaxSMS module's RCFaxClient and SignalWireClient disposeD... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-124079 json | rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that ... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-123804 json | SuperTokens Core is an open source authentication server. From 7.0.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 1... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-123087 json | SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121881 json | SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before ... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121422 json | SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass ... | Not Provided | 2026-11-03 | 2026-11-07 |
| CVE-2026-120733 json | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an a... | Not Provided | 2026-11-03 | 2026-11-06 |
| CVE-2026-120684 json | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process memor... | Not Provided | 2026-11-03 | 2026-11-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Database Server | 9.2.2 | |||
| Application | Oracle | Database Server | 9.2.1 | |||
| Application | Oracle | Database Server | 9.2.0.8dv | |||
| Application | Oracle | Database Server | 9.2.0.8dv | |||
| Application | Oracle | Database Server | 9.2.0.8 | |||
| Application | Oracle | Database Server | 9.2.0.8 | |||
| Application | Oracle | Database Server | 9.2.0.7 | |||
| Application | Oracle | Database Server | 9.2.0.7 | |||
| Application | Oracle | Database Server | 9.2.0.6 | |||
| Application | Oracle | Database Server | 9.2.0.6 | |||
| Application | Oracle | Database Server | 9.2.0.5 | |||
| Application | Oracle | Database Server | 9.2.0.4 | |||
| Application | Oracle | Database Server | 9.2.0.3 | |||
| Application | Oracle | Database Server | 9.2.0.2 | |||
| Application | Oracle | Database Server | 9.2.0.1 | |||
| Application | Oracle | Database Server | 9.2 | |||
| Application | Oracle | Database Server | 9.0.4 | |||
| Application | Oracle | Database Server | 9.0.2.4 | |||
| Application | Oracle | Database Server | 9.0.2.4 | |||
| Application | Oracle | Database Server | 9.0.1.5 |