Timesten In-memory Database (Oracle) - vulnerabilities (CVEs)

42 CVEs, 3 in the last 30 days, 11 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Timesten In-memory Database

CVE-2026-87354 - CVSS 4.3 (medium), 2026-10-20: Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.0 and…
CVE-2026-101600 - CVSS 3.6 (low), 2026-10-20: Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit…
CVE-2026-101522 - CVSS 5.5 (medium), 2026-10-20: Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable…
CVE-2026-60411 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). The supported version that is affected…
CVE-2026-60410 - CVSS 4.3 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60409 - CVSS 5.7 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60408 - CVSS 4.3 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60407 - CVSS 5.6 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60406 - CVSS 6.7 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60405 - CVSS 3.8 (low), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60404 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60403 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60402 - CVSS 9.9 (critical), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2026-60401 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is…
CVE-2021-41772 - CVSS 7.5 (high), 2021-11-08: Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename…
CVE-2021-36221 - CVSS 5.9 (medium), 2021-08-08: Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVE-2021-29923 - CVSS 7.5 (high), 2021-08-07: Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to…
CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
CVE-2021-34558 - CVSS 6.5 (medium), 2021-07-15: The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing…
CVE-2021-36374 - CVSS 5.5 (medium), 2021-07-14: When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out…
CVE-2021-36373 - CVSS 5.5 (medium), 2021-07-14: When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error,…
CVE-2020-11979 - CVSS 7.5 (high), 2020-10-01: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access…
CVE-2020-7712 - CVSS 7.2 (high), 2020-08-30: This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
CVE-2020-1945 - CVSS 6.3 (medium), 2020-05-14: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2019-1010239 - CVSS 7.5 (high), 2019-07-19: DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial…
CVE-2019-0201 - CVSS 5.9 (medium), 2019-05-23: An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when…
CVE-2019-11835 - CVSS 9.8 (critical), 2019-05-09: cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
CVE-2019-11834 - CVSS 9.8 (critical), 2019-05-09: cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.
CVE-2018-15769 - CVSS 7.5 (high), 2018-11-16: RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue.…
CVE-2018-11058 - CVSS 9.8 (critical), 2018-09-14: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to…
CVE-2018-11054 - CVSS 7.5 (high), 2018-08-31: RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to…
CVE-2018-11057 - CVSS 5.9 (medium), 2018-08-31: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA…
CVE-2018-11056 - CVSS 6.5 (medium), 2018-08-31: RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled…
CVE-2018-11055 - CVSS 5.5 (medium), 2018-08-31: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before…
CVE-2018-1288 - CVSS 5.4 (medium), 2018-07-26: In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the…
CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
CVE-2017-5645 - CVSS 9.8 (critical), 2017-04-17: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially…
CVE-2016-2381 - CVSS 7.5 (high), 2016-04-08: Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
CVE-2010-0910 - CVSS 5 (medium), 2010-07-13: Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect…
CVE-2010-0873 - CVSS 10 (critical), 2010-07-13: Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confidentiality,…
CVE-2008-5440 - CVSS 7.5 (high), 2009-01-14: Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and…