CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTPS by a high privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 7.2.
Vulnerability in Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can lead to takeover of the product. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker can result in unauthorized access to critical data and unauthorized update, insert, or delete access. CVSS 3.1 Base Score 8.2.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in unauthorized access to critical data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker can result in unauthorized access to critical data; attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 8.6.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. A difficult to exploit attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in takeover of the SOA Gateway. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle E-Business Suite Integrated SOA Gateway (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low privileged attacker can result in unauthorized creation, deletion, or modification of critical data, unauthorized access to critical data, and partial denial of service. CVSS 3.1 Base Score 8.3.
Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit attack allows a low-privileged attacker with logon to the infrastructure to compromise Applications DBA. CVSS 7.0.
Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable attack allows an unauthenticated attacker with logon to the infrastructure to compromise Applications DBA, requiring user interaction. CVSS 7.8.
Vulnerability in the Applications DBA product (AD Utilities component) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit attack allows a low-privileged attacker with logon to the infrastructure to compromise Applications DBA. CVSS 7.0.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit network attack via TLS allows an unauthenticated attacker to create, delete, or modify critical data and access it. CVSS 7.4.
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack allows an unauthenticated attacker to cause a hang or repeatable crash (DoS). CVSS 7.5.
Vulnerability in Oracle Concurrent Processing (Other Issues component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable attack allows a low-privileged attacker with logon to the infrastructure to compromise Oracle Concurrent Processing. CVSS 7.8.
Vulnerability in Oracle Call Center Technology (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit network attack via RMI allows an unauthenticated attacker to compromise Oracle Call Center Technology. CVSS 8.1.
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP allows a low-privileged attacker to create, delete, or modify critical data and access it. CVSS 8.1.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP allows a low-privileged attacker to compromise Oracle Mobile Field Service. CVSS 8.8.
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP allows a low-privileged attacker to create, delete, or modify critical data and read a subset of data. CVSS 7.1.
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS