CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affects versions 22.3-26.6. Easily exploitable by low-privileged attacker with network access via HTTP, can lead to unauthorized creation, deletion, or modification of data, unauthorized read access to a subset of data, and complete denial of service.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affects versions 22.3-26.6. Easily exploitable by low-privileged attacker with logon to the infrastructure, can lead to takeover of Siebel CRM Cloud Applications.
Vulnerability in Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker with network access via HTTP, can lead to takeover of Oracle Flow Manufacturing.
Vulnerability in Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, requires low privileges and logon to the infrastructure, can lead to takeover of Oracle Work in Process.
Vulnerability in Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Affects versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker with network access via HTTP, requires user interaction. Can lead to unauthorized access to critical data and modification of some data, and may impact other products.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affects versions 22.3-26.6. Easily exploitable by unauthenticated attacker with access to the physical communication segment, can lead to unauthorized creation, deletion, or modification of data and unauthorized access to critical data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affects versions 22.3-26.6. Easily exploitable by low-privileged attacker with network access via HTTP, can lead to takeover of Siebel CRM Cloud Applications.
Vulnerability in Oracle MES for Process Manufacturing (component: Internal Operations) in versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can compromise the system, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with logon to the infrastructure can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A high-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized creation, deletion, or modification of data and full access to data.
Vulnerability in Oracle Financials Common Modules (component: Common Components) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with network access via HTTP can fully take over the system. No user interaction is required.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with network access via HTTP can compromise the system. The attack may lead to unauthorized creation, deletion, or modification of data and full access to data.
Vulnerability in Oracle U.S. Federal Financials (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can fully take over the system. No user interaction is required.
Vulnerability in PeopleSoft Enterprise CC Common Application Objects (component: Common Application Objects) in version 9.2. An unauthenticated attacker with network access via Oracle Net can fully take over the system. The attack is difficult to exploit but requires no user interaction.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (component: Production) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data and partial denial of service.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can compromise the system via HTTP, leading to unauthorized access, modification, or deletion of critical data, as well as partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen) affects versions 13.5 and 24.1. A low-privileged attacker with local access to the infrastructure can take over the platform.