Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*

part: a version: 21c update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductDatabase (24bb7804-ebb8-5226-b481-4dbf075ff327)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-21934 vulnerable 2026-06-08 05:54:22.921111 Details available
MEDIUM (6.8)
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data as well as unauthorized access to critical data or complete access to all Java VM accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).
Published: 2023-04-18T19:54:24.566Z
Updated: 2024-09-16T15:18:18.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21829 vulnerable 2026-06-08 05:54:22.674501 Details available
MEDIUM (6.3)
Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database RDBMS Security. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Database RDBMS Security accessible data as well as unauthorized read access to a subset of Oracle Database RDBMS Security accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N).
Published: 2023-01-17T23:35:06.897Z
Updated: 2024-09-17T14:16:40.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21827 vulnerable 2026-06-08 05:54:22.673482 Details available
MEDIUM (4.3)
Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database Data Redaction. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Database Data Redaction accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Published: 2023-01-17T23:35:06.277Z
Updated: 2024-09-17T14:16:50.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21565 vulnerable 2026-06-08 05:40:01.779221 Details available
MEDIUM (6.5)
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Published: 2022-07-19T21:08:08.000Z
Updated: 2024-09-24T19:55:30.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21498 vulnerable 2026-06-08 05:40:01.629083 Details available
MEDIUM (6.5)
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Published: 2022-04-19T20:38:53.000Z
Updated: 2024-09-24T20:05:23.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21432 vulnerable 2026-06-08 05:40:01.494688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21411 vulnerable 2026-06-08 05:40:01.431809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25329 vulnerable 2026-06-08 05:30:40.683004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25122 vulnerable 2026-06-08 05:30:40.038298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9484 vulnerable 2026-06-08 05:28:01.873985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35169 vulnerable 2026-06-08 05:25:00.874111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35168 vulnerable 2026-06-08 05:25:00.873036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35167 vulnerable 2026-06-08 05:25:00.871932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35166 vulnerable 2026-06-08 05:25:00.870703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35164 vulnerable 2026-06-08 05:25:00.868990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35163 vulnerable 2026-06-08 05:25:00.867768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29508 vulnerable 2026-06-08 05:24:58.340473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29507 vulnerable 2026-06-08 05:24:58.339395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29506 vulnerable 2026-06-08 05:24:58.333408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26185 vulnerable 2026-06-08 05:23:50.794150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.