CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Applications Framework (Web Utilities component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with HTTP network access can easily exploit the flaw to gain unauthorized access to critical data.
A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network access via HTTP to cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 6.5 (availability impact).
A vulnerability in Oracle Agile PLM (Folders, Files & Attachments component) in version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (confidentiality impact).
A vulnerability in Oracle WebCenter Content (Content Server component) in version 12.2.1.4.0 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some WebCenter Content accessible data. CVSS 3.1 Base Score 4.3 (integrity impact).
A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, requiring human interaction. CVSS 3.1 Base Score 5.3 (confidentiality impact).
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Panel Processor component) in versions 8.61-8.63 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access and unauthorized read access to a subset of data, requiring human interaction and potentially impacting additional products (scope change). CVSS 3.1 Base Score 4.4.
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) affects versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0. A low privileged attacker with network access via HTTPS can gain unauthorized read access to a subset of accessible data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Porting) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure, requiring user interaction, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure, under difficult exploit conditions, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure, requiring user interaction, can take over PeopleSoft Enterprise PeopleTools.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can gain access to critical data or all accessible data and perform unauthorized update, insert or delete access.
Vulnerability in Oracle Siebel CRM Integration (EAI component) affecting versions 17.0-26.9. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification, potentially impacting other products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle E-Business Suite Applications DBA (Internal Operations component) affecting versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can lead to unauthorized access to critical data.
Vulnerability in Oracle JDeveloper (ADF Faces component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with logon to the infrastructure can gain unauthorized access to critical data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS