CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping Execution, may significantly impact additional products (scope change).
Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in iSupplier Portal.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Oracle Shipping Execution accessible data.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Shipping Execution, potentially leading to takeover.
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Shipping Execution, resulting in unauthorized access to critical data, unauthorized update/insert/delete access, and partial denial of service.
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in Oracle Order Management.
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Quality, resulting in unauthorized creation, deletion, or modification access to critical data as well as unauthorized access to critical data.
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Project Contracts, and attacks may significantly impact additional products (scope change), resulting in unauthorized access to critical data.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server, resulting in unauthorized creation, deletion, or modification access to critical data as well as unauthorized access to critical data.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in Oracle Mobile Application Server.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, resulting in unauthorized creation, deletion, or modification access to critical data, unauthorized access to critical data, and partial denial of service.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, potentially leading to takeover.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture, potentially leading to takeover.
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments) affects versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Document Management and Collaboration, requiring human interaction, and may significantly impact additional products (scope change), resulting in unauthorized creation, deletion, or modification access to critical data as well as unauthorized access to critical data.
Vulnerability in Oracle Bills of Material (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Bills of Material.
Vulnerability in Oracle Bills of Material (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Bills of Material and potentially other products (scope change).
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement), affecting versions 12.2.3-12.2.15. An easily exploitable flaw requires user interaction and may impact additional products (scope change), allowing unauthorized modification or read access to some Compensation Workbench data.
Vulnerability in Oracle General Ledger (component: ADADMIN) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle General Ledger.
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible in Oracle General Ledger.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS