CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data.
Vulnerability in Oracle Siebel CRM End User (component: Communications Panel/Dashboard) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A low-privileged attacker with network access via HTTP can take over Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.9. A high-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized creation, deletion or modification of data; attacks may also significantly impact additional products (scope change).
Vulnerability in Oracle Siebel Apps - Field Service (component: Smart Answer) affecting versions 17.0-26.9. A high-privileged attacker with network access via HTTP can take over Siebel Apps - Field Service.
Vulnerability in Oracle HTTP Server (component: OSSL Module) affecting version 12.2.1.4.0. A low-privileged attacker with logon access to the infrastructure where Oracle HTTP Server executes can take over the server.
Vulnerability in the 2D component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to cause a hang or frequently repeatable crash (DoS) and to gain unauthorized read and update access to some accessible data. It can be exploited via APIs in the component, e.g., through a web service supplying data to the APIs, and also affects deployments running untrusted code in the Java sandbox.
Vulnerability in Oracle Identity Manager (component: REST WebServices) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can take over Oracle Identity Manager.
Vulnerability in Oracle Outside In Technology (component Outside In PDF Export SDK) version 8.5.8. A difficult-to-exploit attack via HTTP network access requires user interaction and can lead to takeover of the product.
Vulnerability in Oracle Outside In Technology (component Outside In PDF Export SDK) version 8.5.8. A difficult-to-exploit attack via HTTP network access requires user interaction and can lead to takeover of the product.
Vulnerability in Oracle Siebel CRM Integration (component Open Integration) versions 25.12-26.9. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data.
Vulnerability in Oracle Business Process Management Suite (component Case management Service (11g+)) versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable local attack allows an unauthenticated attacker with logon to the infrastructure to take over the product.
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to gain unauthorized access to critical data, with potential impact on other products.
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) version 8.5.8. An easily exploitable attack via HTTP network access allows an unauthenticated attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Solaris (component Utility) versions 11.3 and 11.4. An easily exploitable local attack allows an unauthenticated attacker with logon to the infrastructure to take over the system.
Vulnerability in Oracle E-Business Suite iSupport (component Service Requests) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP network access by a low-privileged attacker allows unauthorized creation, deletion, or modification of data and partial DoS, with potential impact on other products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS