CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle HTTP Server (OSSL Module component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete, or modify critical data and gain full access to it, with potential impact on additional products.
Vulnerability in Oracle HTTP Server (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and access to it.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can gain access to critical data or all accessible data and perform unauthorized update, insert or delete access.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affecting versions 8.61-8.63. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data. CVSS 3.1 Base Score 3.7.
Vulnerability in Oracle Siebel CRM Integration (component: REST) affecting versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring human interaction. CVSS 3.1 Base Score 3.1.
Vulnerability in Oracle Siebel CRM Integration (EAI component) affecting versions 17.0-26.9. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification, potentially impacting other products.
Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can create, delete, or modify critical data and gain full access to it, with potential impact on additional products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle E-Business Suite Applications DBA (Internal Operations component) affecting versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can lead to unauthorized access to critical data.
Vulnerability in Oracle JDeveloper (ADF Faces component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with logon to the infrastructure can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Enterprise Infrastructure SEC) affecting versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized update, insert, or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.6.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - Cloud). Affects versions 9.2.0.0-9.2.26.5. A difficult-to-exploit flaw allows a high-privileged attacker with local logon to cause unauthorized data modification and partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component E1 Dev Platform Tech - UNIX). Affects versions 9.2.0.0-9.2.26.5. An easily exploitable flaw allows a high-privileged attacker with local logon to cause unauthorized data modification and partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon can perform unauthorized modification, read data, and cause partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon can create, delete, or modify critical data, read a subset, and cause hang or repeatable crashes (complete DoS).
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with JDENET network access can gain unauthorized access to critical data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS