CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or all data accessible in Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can create, delete or modify critical data, gain unauthorized access to it, and cause a partial denial of service.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete some data.
Vulnerability in Oracle Siebel Apps - Life Sciences (component: eDetailing). A low-privileged attacker with network access via SQL can take over Siebel Apps - Life Sciences.
Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay) affects versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure can compromise the framework.
Vulnerability in Oracle Siebel CRM (component: Web UI) affects versions 17.0-26.9. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Integration Broker) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction.
Vulnerability in Oracle Siebel CRM Development (component: Workflow) affects versions 25.12-26.9. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially leading to takeover.
Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affects versions 22.3-26.9. An unauthenticated attacker with access to the physical communication segment can exploit it, potentially impacting additional products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Database Server) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing hang or crash and data modification.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Test Framework) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it with user interaction, potentially impacting additional products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure can exploit it with user interaction, potentially leading to takeover.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. A low-privileged attacker with network access via HTTP can exploit it, potentially leading to takeover.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can exploit it with user interaction, causing data modification and denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Report Distribution component, affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized creation, deletion or modification of critical data and causing hang or repeatable crashes (complete DOS).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, SQR component, affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with HTTP network access, allowing unauthorized access to critical data or complete access to all data accessible in PeopleTools.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, PsAdmin component, affecting versions 8.61-8.63. Difficult to exploit, requires access to the physical communication segment attached to the hardware running PeopleTools; an unauthenticated attacker can take over the system.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, an unauthenticated attacker with HTTP network access can take over PeopleTools.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, a low-privileged attacker with HTTP network access can take over PeopleTools.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS