CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized creation, deletion or modification of data and unauthorized access to critical data.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via IIOP. Successful attacks can result in takeover of Oracle Reports Developer.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Reports Developer, leading to unauthorized creation, deletion, or modification of critical data and unauthorized access to all accessible data. CVSS 9.1.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. An unauthenticated attacker with network access via TCP can take over Oracle Reports Developer. CVSS 9.8.
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. A low-privileged attacker with network access via CORBA can take over Oracle Reports Developer, with potential impact on other products (scope change). CVSS 9.9.
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Integration. CVSS 9.8.
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Affects versions 25.12-26.6. A low-privileged attacker with network access via HTTP can take over Siebel CRM Integration, with potential impact on other products (scope change). CVSS 9.9.
Vulnerability in Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Affects versions 25.12-26.6. An unauthenticated attacker with network access via HTTP can take over Siebel CRM Administration. CVSS 9.8.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A low-privileged attacker can compromise data confidentiality and integrity via HTTP, including unauthorized access or modification of critical data. Impact may extend to other products (scope change).
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. A low-privileged attacker can take over the application via HTTP, with impact potentially extending to other products (scope change).
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Lifecycle Management) version 11.2.25.0.000. A low-privileged attacker can gain unauthorized access to or modify critical data via HTTP, with impact potentially extending to other products (scope change).
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Common Events) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. An unauthenticated attacker can gain unauthorized access to critical data, modify some data, and cause partial denial of service via HTTP. Impact may extend to other products (scope change).
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) versions 22.3-26.6. An unauthenticated attacker can take over the application via HTTP, leading to full compromise of confidentiality, integrity, and availability.
Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affected versions are 22.3-26.6. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS