Known Vulnerabilities for Database Server by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Database Server" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100695 json | Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated ... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100687 json | Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to ... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100683 json | Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100631 json | Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100606 json | Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the SSO login path. Wh... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100288 json | Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker w... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-96750 json | MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a ... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-96538 json | WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in serve... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-93759 json | Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the databa... | Not Provided | 2026-09-18 | 2026-09-21 |
| CVE-2026-93598 json | ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 contains an incomplete deny-list in the polyglot script... | Not Provided | 2026-09-18 | 2026-09-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Database Server | 9.2.2 | |||
| Application | Oracle | Database Server | 9.2.1 | |||
| Application | Oracle | Database Server | 9.2.0.8dv | |||
| Application | Oracle | Database Server | 9.2.0.8dv | |||
| Application | Oracle | Database Server | 9.2.0.8 | |||
| Application | Oracle | Database Server | 9.2.0.8 | |||
| Application | Oracle | Database Server | 9.2.0.7 | |||
| Application | Oracle | Database Server | 9.2.0.7 | |||
| Application | Oracle | Database Server | 9.2.0.6 | |||
| Application | Oracle | Database Server | 9.2.0.6 | |||
| Application | Oracle | Database Server | 9.2.0.5 | |||
| Application | Oracle | Database Server | 9.2.0.4 | |||
| Application | Oracle | Database Server | 9.2.0.3 | |||
| Application | Oracle | Database Server | 9.2.0.2 | |||
| Application | Oracle | Database Server | 9.2.0.1 | |||
| Application | Oracle | Database Server | 9.2 | |||
| Application | Oracle | Database Server | 9.0.4 | |||
| Application | Oracle | Database Server | 9.0.2.4 | |||
| Application | Oracle | Database Server | 9.0.2.4 | |||
| Application | Oracle | Database Server | 9.0.1.5 |