A comparison of vulnerabilities in Microsofts SQL Server database and Oracle’s relational database management products shows Oracle’s products to have far more vulnerabilities than do products from Microsoft. Between December 2000 and November 2006, external researchers discovered 233 vulnerabilities in Oracle products. The study looked at vulnerabilities that were reported and fixed in SQL Server 7, 2000 and 2005. The results show that the reputation for relatively poor security that MS SQL server had back in 2002 is no longer deserved, says NGSS founder David Litchfield, founder of NGSS.”]
Source: https://www.csoonline.com/article/2120953/oracle-db-found-to-have-more-flaws-than-sql-server.html