CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Enterprise Manager Base Platform (component Agent Next Gen) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.
Vulnerability in Siebel CRM Integration (component EAI) affecting versions 17.0-26.9. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DoS) of Siebel CRM Integration.
Vulnerability in Oracle Trusted Answer Search (component Application expert UI) affecting version 26.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Trusted Answer Search accessible data; attacks may significantly impact additional products (scope change).
Vulnerability in Oracle Trusted Answer Search (component Application expert UI) affecting version 26.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to critical data; attacks require human interaction and may significantly impact additional products (scope change).
Vulnerability in Oracle Trusted Answer Search (component Application expert UI) affecting version 26.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and unauthorized update, insert, or delete access to some data; attacks require human interaction and may significantly impact additional products (scope change).
Vulnerability in Oracle Trusted Answer Search (PLSQL package) version 26.1. A difficult-to-exploit network attack via Oracle Net by an unauthenticated attacker can lead to takeover of the component.
Vulnerability in Oracle Siebel CRM Development (Siebel Approval Manager component) versions 17.0-26.9. An easily exploitable HTTP attack by an unauthenticated attacker requires user interaction and can lead to takeover of the component.
Vulnerability in Oracle REST Data Services (Core component) versions 24.2.0-26.2.2. An easily exploitable HTTP attack by a low-privileged attacker can result in unauthorized access to critical data or all data accessible through Oracle REST Data Services.
Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup.
Vulnerability in Oracle Secure Backup (Device Management and Support component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Secure Backup and impact additional products (scope change).
Vulnerability in Oracle Secure Backup (Backup and Restore component) versions 19.1.0.0.0 and 19.1.0.1.0. An easily exploitable TCP network attack by an unauthenticated attacker can cause a hang or frequently repeatable crash (complete DoS) of Oracle Secure Backup.
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) version 6.2.4. A difficult-to-exploit HTTP attack by an unauthenticated attacker can lead to takeover of the component.
Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) version 3.6.1. A difficult-to-exploit SQL attack by a low-privileged attacker can lead to takeover of Oracle Product Lifecycle Analytics.
Vulnerability in Oracle Siebel CRM Deployment (component: Cloud Gateway). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM End User (component: Portal Framework). An unauthenticated attacker with network access via HTTPS can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle EDI Gateway (component: All Miscellaneous EDI Issues) of Oracle E-Business Suite. A high-privileged attacker with network access via HTTP can take over Oracle EDI Gateway.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure can create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in Oracle Siebel CRM End User (component: UIF Open UI). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM End User.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS