CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can compromise the system via HTTP, leading to unauthorized access, modification, or deletion of critical data, as well as partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen) affects versions 13.5 and 24.1. A low-privileged attacker with local access to the infrastructure can take over the platform.
Vulnerability in Oracle Enterprise Asset Management (component: Linear Asset Management) affects versions 12.2.3-12.2.15. A low-privileged attacker can, via HTTP and with user interaction, gain unauthorized access to critical data and modify some data, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain complete access to critical data, with potential impact on other products.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. Difficult to exploit, but an unauthenticated attacker can take over the system via HTTP.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can fully compromise the system. CVSS score is 7.8.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP, under difficult exploitation conditions and requiring user interaction, can compromise the system. CVSS score is 7.1.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and perform unauthorized modifications. CVSS score is 7.1.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Event Management) affects versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can perform unauthorized modifications to critical data, gain partial access to data, and cause partial denial of service. CVSS score is 8.6.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Application Config Console) affects versions 13.5 and 24.1. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in JD Edwards EnterpriseOne Orchestrator (component: E1 IOT Orchestrator Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Vulnerability in Oracle JD Edwards EnterpriseOne Orchestrator (component: E1 IOT Orchestrator Security). Affects versions 9.2.0.0-9.2.26.4. Difficult to exploit, allows unauthenticated attacker with network access via TLS to take over the Orchestrator.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker to gain unauthorized access to critical data and cause partial denial of service.
Vulnerability in Oracle Virtual Directory (component: Virtual Directory Server). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low-privileged attacker to take over the virtual directory.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker to gain unauthorized access to critical data, with potential impact on other products.