CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Java SE (RMI component) affecting versions 8u503 and 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in Oracle Java SE (Networking component) affecting versions 21.0.12.1, 25.0.4.1 and 27. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible in the product.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (JAXP component) in the listed versions. A difficult-to-exploit unauthenticated network attack can lead to unauthorized access to critical data or all data accessible in the product.
Vulnerability in PeopleSoft Enterprise PeopleTools (Multichannel Framework component) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can take over the product.
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can, with user interaction, perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data; attacks may impact additional products (scope change).
Vulnerability in the JAXP component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can cause a partial denial of service (partial DoS). The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Networking component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can perform unauthorized data modification and cause a partial denial of service. The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Internal Operations component of Oracle Demand Planning (Oracle Supply Chain) in versions 12.1 and 12.2. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data, requiring user interaction and potentially impacting additional products.
Vulnerability in the US Payroll Year End component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can, with user interaction, modify and read some data, potentially impacting additional products.
Vulnerability in the Diagnostics component of Oracle Applications Manager in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized read access to some data and cause a partial denial of service.
Vulnerability in the Internal Operations component of Oracle HRMS (UK) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can, with user interaction, modify and read some data, potentially impacting additional products.
Vulnerability in the JDBC component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can gain unauthorized access to critical data; exploitation is difficult. The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle HRMS (US) accessible data.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to gain unauthorized read access to a subset of Oracle Report Manager accessible data.
Vulnerability in Oracle Java SE (component: Security) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JAAS) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS