CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-91446
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.

CVE-2026-91444
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.

CVE-2026-91443
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all Siebel CRM Deployment accessible data.

CVE-2026-91441
Medium

Vulnerability in Oracle Siebel Apps - Customer Order Management (component: Order Management). A low-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized update, insert or delete access, unauthorized read access to a subset of data, and partial denial of service.

CVE-2026-91440
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.

CVE-2026-91439
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can gain unauthorized access to critical data or all accessible data.

CVE-2026-91435
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.

CVE-2026-91434
Medium

Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). A high-privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes can take over the product.

CVE-2026-91432
Medium

Vulnerability in Oracle Siebel CRM End User (component: Open UI). An unauthenticated attacker with network access via HTTP can cause unauthorized update, insert or delete access and unauthorized read access to a subset of data.

CVE-2026-91431
Medium

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

CVE-2026-91430
Medium

Vulnerability in the Siebel Apps - Financial Services product (Financial Accounts component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

CVE-2026-91429
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical data and to update, insert or delete some accessible data.

CVE-2026-91428
Medium

Vulnerability in the Siebel CRM End User product (Open UI component) of Oracle Siebel CRM. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to perform unauthorized update, insert or delete of data, requiring user interaction.

CVE-2026-91426
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or all accessible data.

CVE-2026-91424
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to cause a hang or repeatable crash (DoS) as well as unauthorized modification and read access to some data.

CVE-2026-91423
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to perform unauthorized creation, deletion or modification of critical data and unauthorized access to all accessible data.

CVE-2026-91422
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

CVE-2026-91421
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to cause a hang or repeatable crash (DoS) of the system.

CVE-2026-91420
Medium

Vulnerability in the Siebel CRM Deployment product (Server Infrastructure component) of Oracle Siebel CRM. An easily exploitable flaw allows a low-privileged network attacker via HTTP to perform unauthorized creation, deletion or modification of critical data.

CVE-2026-91418
Medium

Vulnerability in the ImageIO component of Oracle Java SE, JavaFX and GraalVM. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS