CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: OIDC) affecting versions 4.0.0-4.5.5 and 27.0.0. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to access critical data and modify some Helidon data, requiring user interaction and potentially impacting additional products.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-security-providers-http-auth) affecting versions 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical Helidon data, potentially impacting additional products.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-security-providers-idcs-mapper) affecting versions 3.0.0-3.2.21 and 4.0.0-4.5.5. A difficult-to-exploit flaw allows a low-privileged attacker logged into the infrastructure to gain unauthorized access to critical Helidon data, potentially impacting additional products.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-common-concurrency-limits) affecting versions 4.0.0-4.5.5 and 27.0.0. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to modify some Helidon data and cause a partial denial of service.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-health) affecting versions 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to gain unauthorized read access to a subset of Helidon data.
Vulnerability in Oracle Supply Chain's Oracle Agile PLM product (component: Import) affecting version 9.3.6. An easily exploitable flaw allows an unauthenticated attacker logged into the infrastructure to gain unauthorized access to critical data or all Oracle Agile PLM accessible data.
Vulnerability in Oracle Supply Chain's Oracle Agile PLM product (component: Acollect) affecting version 2.6. A difficult-to-exploit flaw allows an unauthenticated network attacker via TLS to gain unauthorized access to critical data or all Oracle Agile PLM accessible data.
Vulnerability in Oracle E-Business Suite's Oracle Purchasing product (component: PO View Document) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized access to critical data or all Oracle Purchasing accessible data.
Vulnerability in Oracle E-Business Suite's Oracle Purchasing product (component: Approvals) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to modify some Oracle Purchasing data and read a subset of data, requiring user interaction and potentially impacting additional products.
Vulnerability in Oracle E-Business Suite's Oracle Payroll product (component: Element Types, Links, Entries) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized create, delete or modify access to critical Oracle Payroll data.
Vulnerability in Oracle Demand Planning (Internal Operations component) affecting versions 12.1 and 12.2. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction is required; attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Payroll (Internal Operations component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Payroll accessible data.
Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Order Management accessible data.
Vulnerability in Oracle EDI Gateway (All Miscellaneous EDI Issues component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to take over Oracle EDI Gateway.
Vulnerability in Oracle Enterprise Manager Base Platform (Security Framework component) affecting versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in Oracle TimesTen In-Memory Database (TimesTen IMDB component) affecting versions 22.1-22.1.1.43.0. A low-privileged attacker with logon access to the infrastructure where the database runs can exploit it to gain unauthorized access to critical data or complete access to all database accessible data.
Vulnerability in Oracle Utilities Network Management System (component: System Wide) affects multiple supported versions. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all system data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: Libraries) affects multiple supported versions. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle WebLogic Server (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all server data.
Vulnerability in the RDBMS component of Oracle Database Server affects versions 23.4.0-23.26.3. An easily exploitable flaw allows a low-privileged attacker with no special privileges and network access via HTTP to gain unauthorized access to critical data or complete access to all RDBMS data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS