CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and unauthorized access to data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Managed File Transfer (component: MFT Runtime Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows low privileged attacker with network access via T3, IIOP to compromise Oracle Managed File Transfer. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Web Services Manager (component: Web Services Security) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and unauthorized access to data. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Identity Manager Connector (component: Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable flaw allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Identity Manager Connector (component: Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable flaw allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebLogic Server (component: WLS Core Components) affects versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via RMI to compromise Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via RMI, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via RMI, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via T3 and IIOP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing unauthorized modification of data, partial read access, and partial denial of service. CVSS score 9.9.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.
Vulnerability in Service Delivery Platform (Messaging Enabler component) versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by low-privileged attacker with network access via Oracle Net, allowing unauthorized modification and full data access. CVSS score 9.6.
Vulnerability in Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in PeopleSoft Enterprise PeopleTools (Business Interlink component) versions 8.61-8.63. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Siebel Apps - Marketing (Marketing component) versions 17.0-26.6. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing full data access and complete denial of service (hang or frequent crashes). CVSS score 9.1.
Vulnerability in Oracle Web Services Manager (component: Web Services Security) allows an unauthenticated attacker via HTTP to gain unauthorized access, modification, or deletion of data. The attack can result in full compromise of accessible data. CVSS score 9.1.