Oracle Http Server vulnerabilities
112 published vulnerabilities in Oracle Http Server, 4 of them exploited in the wild. The most were published in 2021 (20), and 9 so far in 2026.
Oracle Http Server vulnerabilities by year
1999
2002
2004
2006
2007
2009
2010
2012
2013
2014
2015
2016
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Oracle Http Server vulnerabilities
- CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control
- CVE-2021-40438 Apache HTTP Server-Side Request Forgery (SSRF)
- CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write
- CVE-2019-0211 Apache HTTP Server Privilege Escalation
- CVE-2026-60365 Missing authorization in Oracle HTTP Server
- CVE-2010-0425 Use after free in n/a
- CVE-2006-5347 Other in n/a
- CVE-2006-5348 Other in n/a
- CVE-2006-5349 Other in n/a
- CVE-2006-5354 Other in n/a
- CVE-1999-1125 Privilege escalation in n/a
- CVE-2026-60363 Auth bypass in Oracle HTTP Server
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.