CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data, and attacks may significantly impact additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via T3 or IIOP can gain unauthorized read access to a subset of Oracle Essbase accessible data.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with logon to the infrastructure where Oracle Essbase executes can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low privileged attacker with network access via HTTP can gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all accessible data.
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.
Vulnerability in Oracle Middleware Common Libraries and Tools (Remote Diagnostic Agent component) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.
Vulnerability in the Java VM component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. A difficult to exploit flaw allows a low-privileged attacker with network access via SOCKS5 to perform unauthorized creation, deletion or modification of critical data.
Vulnerability in Oracle REST Data Services (Graph QL component) affects versions 24.2.0-26.2.1. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affects versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Visual Analyzer component) affects version 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Majel Mobile Service component) affects versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.
Vulnerability in Oracle BI Publisher (Web Service API component) affects versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert or delete access and read access to a subset of data, requiring user interaction.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects versions 8.2.0.0.0 and 12.2.1.4.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data, requiring user interaction.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affects version 12.2.1.4.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert or delete access and read access to a subset of data, with scope change potentially impacting other products.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affecting version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 6.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS