CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Universal Work Queue (UWQ Server Issues component) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP can exploit it, but user interaction is required. Successful attack allows unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability in Oracle Enterprise Asset Management (Internal Operations component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Content Manager (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affects versions 22.3-26.5. A low-privileged attacker with network access via HTTP can compromise data confidentiality, and attacks may impact additional products (scope change).
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.5. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or full access to all application data.
Vulnerability in Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Vulnerability in Oracle Process Manufacturing Regulatory Management (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, requires low-privileged attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and impact other products.
Vulnerability in Oracle Process Manufacturing Regulatory Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle General Ledger within Oracle E-Business Suite. A low-privileged attacker with network access via SOAP can take over the system.
Oracle Common Application Components (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has a difficult-to-exploit vulnerability that can be used by a low-privileged attacker via HTTP. Successful attack can affect other products and result in unauthorized access, data modification, and partial denial of service.
Vulnerability in Oracle Applications Framework (Search Bean component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Applications Framework (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the framework.
Vulnerability in Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows an unauthenticated attacker via HTTP to cause hangs or frequent crashes (DOS), as well as unauthorized read and modification of data.
Vulnerability in Oracle Applications Technology Stack (part of Oracle E-Business Suite) allows an unauthenticated attacker over HTTP to compromise the system. Exploitation is difficult.
In PeopleSoft Enterprise HCM Human Resources (version 9.2), a vulnerability in the French Public Sector Specific component allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and partially modify data.
Vulnerability in PeopleSoft Enterprise HCM Human Resources (version 9.2) in Core component. Difficult to exploit, unauthenticated attacker via TCP can cause unauthorized data modification and complete denial of service (DoS).
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to take over the system. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in Oracle Solaris (Filesystems component) allows a low-privileged attacker with local access to take over the system. Attacks may impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS