CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows unauthenticated attacker to gain unauthorized access to critical data.
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to create, delete, or modify critical data and cause partial denial of service.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to create, delete, or modify critical data and cause partial denial of service.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows low privileged attacker to create, delete, or modify critical data, gain access to it, and cause partial denial of service; attack may impact additional products (scope change).
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized read access to a subset of data.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTPS to gain unauthorized access to critical data and cause a partial denial of service.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTPS to gain unauthorized access to critical data, update/insert/delete some data, and cause a partial denial of service.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and update/insert/delete some data.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security) affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all accessible data in the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS