CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 6.5.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. An easily exploitable HTTP attack allows an unauthenticated attacker to gain unauthorized access to critical data and to update, insert or delete some data.
Vulnerability in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3. An easily exploitable Oracle Net attack allows a low-privileged attacker with Create Session privilege to gain unauthorized access to critical data, potentially impacting other products.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) affecting version 6.2.4. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to data, modify it, and cause partial denial of service. CVSS 6.4.
Vulnerability in the Oracle OLAP component of Oracle Database Server affecting versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. An easily exploitable Oracle Net attack allows a low-privileged attacker with DBMS_AW privilege to take over Oracle OLAP.
Vulnerability in PeopleSoft Enterprise FIN Inventory Brazil (Inventory component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in PeopleSoft Enterprise FIN Manufacturing Brazil (Integration component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Foundation component) affecting version 12.2.1.4.0. A difficult-to-exploit local attack allows a low-privileged attacker logged on to the infrastructure to take over the system.
Vulnerability in Oracle BI Publisher (Web Server component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP, with user interaction, can modify and read some data, with possible impact on other products. CVSS 6.1.
Vulnerability in Oracle BI Publisher (Web Server component) affecting version 12.2.1.4.0. An unauthenticated attacker via HTTP can modify and read some data. CVSS 6.5.
Vulnerability in PeopleSoft Enterprise FIN Product Configurator Brazil (Product Configurator component) affecting version 9.1. A low-privileged attacker with logon access to the infrastructure can modify data and cause partial denial of service. CVSS 4.4.
Vulnerability in Oracle WebCenter Sites (versions 12.2.1.4.0 and 14.1.2.0.0) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impact).
Vulnerability in Oracle Agile Product Lifecycle Management for Process (version 6.2.4) allows a low-privileged attacker with network access via HTTP to take over the application. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0) allows an unauthenticated attacker with logon to the infrastructure to take over the application, requiring user interaction. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle GoldenGate (Vendor Access Module component) affecting versions 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data. CVSS 5.5.
Vulnerability in Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0) allows an unauthenticated attacker with network access via HTTP to take over the application, though exploitation is difficult. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0) allows an unauthenticated attacker with logon to the infrastructure to take over the application, requiring user interaction. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Sites (versions 12.2.1.4.0 and 14.1.2.0.0) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impact).
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (Common Objects component) affecting version 9.1. An unauthenticated attacker via HTTP can modify data and cause partial denial of service. CVSS 6.5.
Vulnerability in Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0) allows a low-privileged attacker with logon to the infrastructure to take over the application. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS