CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the US Payroll Year End component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can, with user interaction, modify and read some data, potentially impacting additional products.
Vulnerability in the Diagnostics component of Oracle Applications Manager in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized read access to some data and cause a partial denial of service.
Vulnerability in the Internal Operations component of Oracle HRMS (UK) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can, with user interaction, modify and read some data, potentially impacting additional products.
Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.
Vulnerability in the JDBC component of Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access can gain unauthorized access to critical data; exploitation is difficult. The vulnerability also applies to Java deployments running untrusted code in a sandbox.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Internal Operations component of Oracle HRMS (US) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle HRMS (US) accessible data.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to gain unauthorized read access to a subset of Oracle Report Manager accessible data.
Vulnerability in Oracle Java SE (component: Security) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JAAS) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Weblogic Server Proxy Plug-in (WebLogic Server Proxy Plug-In for Third-Party Web Servers component) affecting versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify critical data and gain full access to it, with impact potentially extending beyond this product.
Vulnerability in Oracle Java SE (component: Compiler) affects versions 21.0.12.1, 25.0.4.1, and 27. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle HRMS (US) of Oracle E-Business Suite (component: Mobile Applications) affects versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.
Vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. A difficult to exploit flaw allows an unauthenticated attacker with network access via TLS to perform unauthorized update, insert, or delete access to some accessible data.
Vulnerability in PeopleSoft Enterprise HCM Human Resources (component: Administer Workforce) affects version 9.2. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset of data, and the ability to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security) affects versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification of critical data.
Vulnerability in the Portal component of Oracle PeopleSoft Enterprise PeopleTools versions 8.61-8.63. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data, requiring user interaction and potentially impacting additional products.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP, requiring user interaction, to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data, with potential impact on additional products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS