Known Vulnerabilities for Http Server by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Http Server" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126802 json | NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers ... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126720 json | Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloud_manage, where a ... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126626 json | The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 counts every failed CardDAV, CalDAV or Autodis... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126618 json | The auto-ban of Progressive Robot hMailServer 6.0.0-B1 through 6.3.7 can be kept from banning an address after repeated faile... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126614 json | The web services listener of Progressive Robot hMailServer 6.3.3 through 6.3.7 does not apply the server's IP ranges to the c... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126136 json | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to th... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126133 json | When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125871 json | The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) vulnerability. ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125333 json | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. From 0.1.2 until 1.4.3, ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125332 json | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, a forge.... | Not Provided | 2026-11-10 | 2026-11-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Http Server | 9.2.0.8 | |||
| Application | Oracle | Http Server | 9.2.0.7 | |||
| Application | Oracle | Http Server | 9.2.0 | |||
| Application | Oracle | Http Server | 9.1 | |||
| Application | Oracle | Http Server | 9.0.4.1.0 | |||
| Application | Oracle | Http Server | 9.0.4.0.0 | |||
| Application | Oracle | Http Server | 9.0.3.1 | |||
| Application | Oracle | Http Server | 9.0.2.3 | |||
| Application | Oracle | Http Server | 9.0.2 | |||
| Application | Oracle | Http Server | 9.0.1.5 | |||
| Application | Oracle | Http Server | 9.0.1 | |||
| Application | Oracle | Http Server | 8.1.7 | |||
| Application | Oracle | Http Server | 2.1 | |||
| Application | Oracle | Http Server | 12.2.1.4.0 | |||
| Application | Oracle | Http Server | 12.2.1.3.0 | |||
| Application | Oracle | Http Server | 12.2.1.2.0 | |||
| Application | Oracle | Http Server | 12.2.1.1.0 | |||
| Application | Oracle | Http Server | 12.2.1.1 | |||
| Application | Oracle | Http Server | 12.2.1 | |||
| Application | Oracle | Http Server | 12.1.3.0.0 |