CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Java SE (component: Compiler) affects versions 21.0.12.1, 25.0.4.1, and 27. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle HRMS (US) of Oracle E-Business Suite (component: Mobile Applications) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.
Vulnerability in PeopleSoft Enterprise HCM Human Resources (component: Administer Workforce) affects version 9.2. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset of data, and the ability to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification of critical data.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.
Vulnerability in Oracle HRMS (UK) of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.
Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite, component Korean Payroll. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite, component Indian Payroll. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite, component Product Diagnostic Tools. Affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Integration Broker. Affects versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, requiring user interaction and potentially impacting other products.
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise the system.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Updates Environment Mgmt. Affects versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to compromise the system.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Push Notifications. Affects versions 8.61 and 8.62. An easily exploitable flaw allows a high-privileged attacker with access to the physical communication segment to compromise the system.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Search Framework. Affects versions 8.61 and 8.62. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise the system.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, component Meta Data. Affects versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise the system.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Process Scheduler, affecting versions 8.61 and 8.62. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system, requiring user interaction and potentially impacting additional products (scope change). Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Search Framework, affecting version 8.62. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to compromise the system, requiring user interaction. Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Portal, affecting versions 8.61 and 8.62. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized read access to a subset of data and partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, component Application Data Sets, affecting versions 8.61-8.63. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and complete denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS