CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 6.5.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to data, modify it, and cause partial denial of service. CVSS 6.4.
Vulnerability in PeopleSoft Enterprise FIN Inventory Brazil (Inventory component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in PeopleSoft Enterprise FIN Manufacturing Brazil (Integration component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP, with user interaction, can modify and read some data, with possible impact on other products. CVSS 6.1.
Vulnerability in Oracle BI Publisher (Web Server component) affecting version 12.2.1.4.0. An unauthenticated attacker via HTTP can modify and read some data. CVSS 6.5.
Vulnerability in PeopleSoft Enterprise FIN Product Configurator Brazil (Product Configurator component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in Oracle GoldenGate (Vendor Access Module component) affecting versions 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data. CVSS 5.5.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (Common Objects component) affecting version 9.1. An unauthenticated attacker via HTTP can modify data and cause partial denial of service. CVSS 6.5.
Vulnerability in Oracle SOA Suite (Fabric Layer component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with network access via HTTPS can, under difficult conditions, perform unauthorized update, insert or delete operations and cause partial denial of service.
Vulnerability in Oracle GoldenGate (Admin Client Executable component) affecting versions 23.4–23.26.2.0.0. A high-privileged attacker with network access via HTTP can, under difficult conditions, gain unauthorized access to critical data or all data accessible in Oracle GoldenGate.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting version 12.2.1.4.0. A low-privileged attacker with network access via HTTPS can easily gain unauthorized read access to a subset of data accessible in Oracle BI Publisher.
Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can, under difficult conditions requiring user interaction, perform unauthorized modification or read of data, with possible impact on additional products.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Foundation component) affecting version 12.2.1.4.0. A low-privileged attacker with network access via HTTP can easily cause a partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can, with user interaction, perform unauthorized modification or read of data, with possible impact on additional products.
Vulnerability in PeopleSoft Enterprise PeopleTools (Report Distribution component) affecting versions 8.61–8.63. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in PeopleTools.
Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can easily perform unauthorized update, insert or delete of data and read a subset of data.
Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data or all data accessible in Oracle BI Publisher.
Vulnerability in PeopleSoft Enterprise PeopleTools (Porting component) affecting versions 8.61 and 8.62. A high-privileged attacker with logon to the infrastructure hosting PeopleTools can easily perform unauthorized creation, deletion or modification of data and access critical data.
Vulnerability in the Installer component of Oracle Identity Manager (Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to gain unauthorized access to critical data or all data accessible in Oracle Identity Manager.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS