CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle JDeveloper of Oracle Fusion Middleware (component: Oracle JDeveloper). Affects versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of accessible data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a partial denial of service, requiring user interaction.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Monitoring and Diagnostics SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to modify some data and cause a partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to modify some data, requiring user interaction.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to modify and read some data.
Vulnerability in Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security). Affects version 9.2. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to modify some data.
Vulnerability in Oracle WebCenter Content of Oracle Fusion Middleware (component: Content Server). Affects version 14.1.2.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Solaris of Oracle Systems (component: Libraries). Affects version 11.4. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Solaris of Oracle Systems (component: Services). Affects version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with logon to the infrastructure to modify some data, requiring user interaction.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 2.5.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle Solaris (component: Image Packaging System) affecting version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized update, insert, or delete access to some data, requiring human interaction. CVSS 3.1 Base Score 3.1.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Report Distribution) affecting versions 8.61-8.63. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 2.7.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: XML Publisher) affecting versions 8.61-8.63. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.3.
Vulnerability in Oracle JD Edwards EnterpriseOne Human Resources Management (component: Human Resources) affecting version 9.2. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JAXP) affecting the listed versions. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle Siebel CRM Integration (component: REST) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring human interaction. CVSS 3.1 Base Score 3.1.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized update, insert, or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.6.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - Cloud). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with local logon to cause unauthorized data modification and partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS