CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily cause a hang or repeatable crash (complete DoS) of the product.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JAXP) affecting the listed versions. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle Applications Framework (Web Utilities component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with HTTP network access can easily exploit the flaw to gain unauthorized access to critical data.
A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network access via HTTP to cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
Vulnerability in Oracle Payroll (component Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Payroll.
A vulnerability in Oracle Agile PLM (Folders, Files & Attachments component) in version 9.3.6 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.5 (confidentiality impact).
A vulnerability in Oracle WebCenter Content (Content Server component) in version 12.2.1.4.0 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some WebCenter Content accessible data. CVSS 3.1 Base Score 4.3 (integrity impact).
A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, requiring human interaction. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
Vulnerability in Oracle General Ledger (component Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to create, delete or modify critical data, read a subset of data, and cause a complete DoS.
Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Order Capture.
Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Applications Platform Engineering.
A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Panel Processor component) in versions 8.61-8.63 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access and unauthorized read access to a subset of data, requiring human interaction and potentially impacting additional products (scope change). CVSS 3.1 Base Score 4.4.
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) affects versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0. A low privileged attacker with network access via HTTPS can gain unauthorized read access to a subset of accessible data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Porting) affects versions 8.61-8.63. An unauthenticated attacker with logon to the infrastructure, requiring user interaction, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle GoldenGate (component: Admin Server Executable) affects versions 19.1.0.0.0-19.32.0.0, 21.3-21.23, and 23.4-23.26.3.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure, under difficult exploit conditions, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure, requiring user interaction, can take over PeopleSoft Enterprise PeopleTools.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS