GCVE - cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*

part: a version: 18c update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Database (`24bb7804-ebb8-5226-b481-4dbf075ff327`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-2245`	vulnerable	2026-06-08 05:31:46.139951	Details available LOW (2.7) Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Audit Policy privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Unified Audit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition Unified Audit accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N). Published: 2021-04-22T21:53:55.000Z Updated: 2024-09-26T14:47:55.999Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpuapr2021.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-2207`	vulnerable	2026-06-08 05:31:46.069060	Details available LOW (2.3) Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having RMAN executable privilege with logon to the infrastructure where Oracle Database - Enterprise Edition executes to compromise Oracle Database - Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N). Published: 2021-04-22T00:00:00.000Z Updated: 2024-09-26T18:11:48.249Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpuapr2021.html http://packetstormsecurity.com/files/174448/Oracle-RMAN-Missing-Auditing.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5360`	vulnerable	2026-06-08 05:26:42.261859	Details available HIGH (7.5) Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems. Published: 2020-12-16T15:50:15.206Z Updated: 2024-09-16T22:57:09.417Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities https://www.oracle.com/security-alerts/cpuApr2021.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5359`	vulnerable	2026-06-08 05:26:42.257190	Details available MEDIUM (5.8) Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data. Published: 2020-12-16T15:50:14.593Z Updated: 2024-09-16T22:45:42.684Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities https://www.oracle.com/security-alerts/cpuApr2021.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2978`	vulnerable	2026-06-08 05:25:00.788711	Details available MEDIUM (4.1) Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While the vulnerability is in Oracle Database - Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N). Published: 2020-07-15T00:00:00.000Z Updated: 2024-09-27T18:44:51.925Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpujul2020.html https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/ http://packetstormsecurity.com/files/172183/Oracle-RMAN-Missing-Auditing.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3740`	vulnerable	2026-06-08 05:13:55.844587	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3739`	vulnerable	2026-06-08 05:13:55.835623	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3738`	vulnerable	2026-06-08 05:13:55.819904	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.