Secure Backup (Oracle) - vulnerabilities (CVEs)

36 CVEs, 6 in the last 30 days, 18 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Secure Backup

CVE-2026-101483 - CVSS 6.5 (medium), 2026-10-20: Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…
CVE-2026-101484 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…
CVE-2026-101480 - CVSS 5.3 (medium), 2026-10-20: Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…
CVE-2026-101482 - CVSS 7.8 (high), 2026-10-20: Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…
CVE-2026-101481 - CVSS 8.8 (high), 2026-10-20: Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily…
CVE-2026-101479 - CVSS 8.6 (high), 2026-10-20: Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable…
CVE-2025-21578 - CVSS 6.7 (medium), 2025-04-15: Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and…
CVE-2021-42013 - CVSS 9.8 (critical), 2021-10-07: It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files…
CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
CVE-2021-33193 - CVSS 7.5 (high), 2021-08-16: A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue…
CVE-2021-26691 - CVSS 9.8 (critical), 2021-06-10: In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
CVE-2021-3450 - CVSS 7.4 (high), 2021-03-25: The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting…
CVE-2021-3449 - CVSS 5.9 (medium), 2021-03-25: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2015-1351 - CVSS 7.5 (high), 2015-03-30: Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers…
CVE-2011-2251 - CVSS 4.3 (medium), 2011-07-20: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect integrity via unknown…
CVE-2011-2261 - CVSS 10 (critical), 2011-07-20: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2011-2252 - CVSS 6.8 (medium), 2011-07-20: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2010-3596 - CVSS 6.4 (medium), 2011-01-19: Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown…
CVE-2010-0907 - CVSS 10 (critical), 2010-07-13: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors,…
CVE-2010-0898 - CVSS 10 (critical), 2010-07-13: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-0906 - CVSS 9 (critical), 2010-07-13: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2010-0904 - CVSS 5 (medium), 2010-07-13: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-0899 - CVSS 9 (critical), 2010-07-13: Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2010-0072 - CVSS 10 (critical), 2010-01-13: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2009-1978 - CVSS 9 (critical), 2009-07-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2009-1977 - CVSS 10 (critical), 2009-07-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2008-5445 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown…
CVE-2008-5443 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown…
CVE-2008-5441 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown…
CVE-2008-5448 - CVSS 10 (critical), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity,…
CVE-2008-4006 - CVSS 10 (critical), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity,…
CVE-2008-5444 - CVSS 10 (critical), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity,…
CVE-2008-3981 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown…
CVE-2008-5442 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown…
CVE-2008-5449 - CVSS 10 (critical), 2009-01-14: Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity,…