CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 14.1.2.0.0. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in unauthorized creation, deletion or modification of data, unauthorized read access to a subset of data, and cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via IIOP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via IIOP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via TCP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via HTTP. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized access to critical data or complete access to all data, as well as unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via UDP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized creation, deletion or modification of data and unauthorized access to critical data.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via IIOP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Reports Developer, leading to unauthorized creation, deletion, or modification of critical data and unauthorized access to all accessible data. CVSS 9.1.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. An unauthenticated attacker with network access via TCP can take over Oracle Reports Developer. CVSS 9.8.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. A low-privileged attacker with network access via CORBA can take over Oracle Reports Developer, with potential impact on other products (scope change). CVSS 9.9.
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
Vulnerability in Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Administration. CVSS 9.8.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A low-privileged attacker can compromise data confidentiality and integrity via HTTP, including unauthorized access or modification of critical data. Impact may extend to other products (scope change).