CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. An easily exploitable HTTP attack by an unauthenticated attacker allows updating, inserting or deleting some data, unauthorized read of a subset of data and partial denial of service.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data, and attacks may significantly impact additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. An easily exploitable HTTP attack by a low privileged attacker allows unauthorized access to critical data or complete access to all Essbase data, with possible impact on additional products.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with network access via HTTP can take over Oracle Essbase. CVSS 9.9.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with network access via HTTP can take over Oracle Essbase. CVSS 9.9.
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. An easily exploitable HTTP attack by a low privileged attacker allows unauthorized access to critical data or complete access to all Essbase data, with possible impact on additional products.
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. A difficult to exploit T3 and IIOP attack by an unauthenticated attacker can lead to takeover of Essbase.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via T3 or IIOP can gain unauthorized read access to a subset of Oracle Essbase accessible data.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with logon to the infrastructure where Oracle Essbase executes can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. An easily exploitable HTTP attack by a low privileged attacker allows unauthorized access to critical data or complete access to all Essbase data, with possible impact on additional products.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low privileged attacker with network access via HTTP can gain unauthorized read access to a subset of Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Essbase accessible data, with potential impact on additional products (scope change).
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all accessible data.
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable attack by a low privileged user with local logon to the infrastructure can lead to takeover of the system.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Product Quality Management) affecting version 6.2.4. An easily exploitable HTTP attack by an unauthenticated attacker allows unauthorized access to critical data and update, insert or delete some data.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.1.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. A difficult-to-exploit HTTP attack allows an unauthenticated network attacker to create, delete or modify critical data and gain unauthorized access to data.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An unauthenticated attacker with network access via HTTP, requiring user interaction, can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS