# Oracle Http Server


- [CVE-2026-21962](https://insights.sbomify.com/CVE-2026-21962/): Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2021-4034](https://insights.sbomify.com/CVE-2021-4034/): Red Hat Polkit Out-of-Bounds Read and Write (high 7.8, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2026-60365](https://insights.sbomify.com/CVE-2026-60365/): Missing authorization in Oracle HTTP Server (critical 10.0)
- [CVE-2010-0425](https://insights.sbomify.com/CVE-2010-0425/): Use after free in n/a (critical 10.0)
- [CVE-2006-5347](https://insights.sbomify.com/CVE-2006-5347/): Other in n/a (critical 10.0)
- [CVE-2006-5348](https://insights.sbomify.com/CVE-2006-5348/): Other in n/a (critical 10.0)
- [CVE-2006-5349](https://insights.sbomify.com/CVE-2006-5349/): Other in n/a (critical 10.0)
- [CVE-2006-5354](https://insights.sbomify.com/CVE-2006-5354/): Other in n/a (critical 10.0)
- [CVE-1999-1125](https://insights.sbomify.com/CVE-1999-1125/): Privilege escalation in n/a (critical 10.0)
- [CVE-2026-60363](https://insights.sbomify.com/CVE-2026-60363/): Auth bypass in Oracle HTTP Server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/http-server/