CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Order Management (component Transaction Entry) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (component Global Payroll for Switzerland) affecting version 9.2. An easily exploitable attack by a high-privileged attacker with logon to the infrastructure can result in unauthorized update, insert, or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) affecting version 8.5.8. An easily exploitable attack by an unauthenticated attacker with network access via HTTP can result in a partial denial of service.
Vulnerability in Oracle Outside In Technology (component Outside In Clean Content SDK) affecting version 8.5.8. An easily exploitable attack by a low-privileged attacker with logon to the infrastructure can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.
Vulnerability in iSupport (component Service Requests) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.
Vulnerability in the Utility component of Oracle Solaris 11.4. A low-privileged attacker with logon access can create, delete, or modify critical data, and attacks may significantly impact additional products.
Vulnerability in the Networking component of Oracle Java SE. An unauthenticated attacker with network access can perform unauthorized update, insert, or delete operations on some Java SE accessible data.
Vulnerability in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with local logon, requiring user interaction, can modify critical data, gain unauthorized read access, and cause a hang or repeatable crash.
Vulnerability in the Libraries component of Oracle Solaris 11.4. An unauthenticated attacker with local logon, requiring user interaction, can cause a hang or repeatable crash (complete DoS) of Solaris.
Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.0.0). A high-privileged attacker with local logon can modify critical data and cause a hang or repeatable crash.
Vulnerability in the Java Business Objects component of Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0). An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data.
Vulnerability in the Security Framework component of Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0). An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain access to critical data.
Vulnerability in the ADF Databinding component of Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0). A low-privileged attacker with network access via SOAP can gain access to critical data and cause a partial denial of service.
Vulnerability in the Installation Security component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A low-privileged attacker with local logon can gain access to critical data, and attacks may impact additional products.
Vulnerability in the Interoperability SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). An unauthenticated attacker with network access via HTTPS can gain access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with HTTP network access can, with user interaction, perform unauthorized update, insert or delete of some data and read a subset of data. CVSS 3.1 Base Score 5.4.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can, with user interaction, perform unauthorized update, insert or delete of some data and read a subset of data. CVSS 3.1 Base Score 6.1.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Business Logic Infra SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause a partial denial of service. CVSS 3.1 Base Score 4.3.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Business Logic Infra SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can gain unauthorized read access to a subset of data and cause a partial denial of service. CVSS 3.1 Base Score 5.4.
Vulnerability in Oracle JD Edwards EnterpriseOne Localizations (LATAM component) affecting version 9.2. A low-privileged attacker with JDENET network access can gain unauthorized read access to a subset of data and cause a partial denial of service. CVSS 3.1 Base Score 5.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS