CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Service Bus (Core component) affecting version 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Service Bus.
Vulnerability in Oracle Service Bus (Core component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Service Bus.
Vulnerability in Oracle Solaris (Image Packaging System component) affecting version 11.4. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.
Vulnerability in Oracle Applications Framework (Personalization component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to unauthorized creation, deletion, or modification of critical data, requiring user interaction.
Vulnerability in Pasta (Printing Engine component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Pasta.
Vulnerability in Applications DBA (AD Utilities component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with local logon access to unauthorized creation, deletion, or modification of critical data.
Vulnerability in the Applications DBA product (component AD Utilities) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
Vulnerability in Oracle Outside In Technology (component Outside In Core), version 8.5.8. An unauthenticated attacker with network access via HTTP can easily cause a hang or repeatable crash (complete DoS) of the product.
Vulnerability in Oracle Outside In Technology (component Outside In Core), version 8.5.8. An unauthenticated attacker with network access via HTTP can, with user interaction, easily take over the product.
Vulnerability in Oracle Outside In Technology (component Outside In Core), version 8.5.8. An unauthenticated attacker with network access via HTTP can easily cause a hang or repeatable crash (complete DoS) of the product.
Vulnerability in Oracle Outside In Technology (component Outside In Core), version 8.5.8. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and cause a partial DoS of the product.
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily cause a hang or repeatable crash (complete DoS) of the product.
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
Vulnerability in Oracle Payroll (component Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Payroll.
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
Vulnerability in Oracle General Ledger (component Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to create, delete or modify critical data, read a subset of data, and cause a complete DoS.
Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Order Capture.
Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Applications Platform Engineering.
Vulnerability in Oracle GoldenGate (component: Admin Server Executable) affects versions 19.1.0.0.0-19.32.0.0, 21.3-21.23, and 23.4-23.26.3.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.
Vulnerability in Oracle HTTP Server (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and access to it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS