Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:*:*:*:*

part: a version: 12.2.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductDatabase (24bb7804-ebb8-5226-b481-4dbf075ff327)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35558 vulnerable 2026-06-08 05:32:49.125844 Details available
MEDIUM (4.3)
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Core RDBMS. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Published: 2021-10-20T10:50:06.000Z
Updated: 2024-09-25T19:35:48.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35557 vulnerable 2026-06-08 05:32:49.124868 Details available
MEDIUM (4.3)
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Core RDBMS. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Published: 2021-10-20T10:50:05.000Z
Updated: 2024-09-25T19:35:59.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35551 vulnerable 2026-06-08 05:32:49.104852 Details available
MEDIUM (5.5)
Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of RDBMS Security as well as unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Published: 2021-10-20T10:50:00.000Z
Updated: 2024-09-25T19:37:05.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2619 vulnerable 2026-06-08 05:13:45.029434 Details available
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure where Portable Clusterware executes to compromise Portable Clusterware. While the vulnerability is in Portable Clusterware, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Portable Clusterware. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Published: 2019-04-23T18:16:41.000Z
Updated: 2024-10-02T15:59:03.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2444 vulnerable 2026-06-08 05:13:44.660144 Details available
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to compromise Core RDBMS. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
Published: 2019-01-16T19:00:00.000Z
Updated: 2024-10-02T16:13:57.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2406 vulnerable 2026-06-08 05:13:44.550940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1288 vulnerable 2026-06-08 05:11:17.526342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10321 vulnerable 2026-06-08 05:08:35.694673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10292 vulnerable 2026-06-08 05:08:35.647155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10202 vulnerable 2026-06-08 05:08:35.490897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10190 vulnerable 2026-06-08 05:08:35.457436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.