Known Vulnerabilities for Xml Database by Oracle
Listed below are 3 of the newest known vulnerabilities associated with "Xml Database" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-92805 json | UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in Configure... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92782 json | Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attack... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92591 json | Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes anon... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-91997 json | evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-91939 json | Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unau... | Not Provided | 2026-09-15 | 2026-09-16 |
| CVE-2026-91934 json | Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases,... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-91925 json | Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run ... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-91924 json | pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowi... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-90940 json | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-90895 json | Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, c... | Not Provided | 2026-09-14 | 2026-09-14 |