CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Vulnerability in Oracle Partner Management (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. It allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data in Oracle Partner Management.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to create, delete, or modify critical data and cause partial denial of service.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to create, delete, or modify critical data and cause partial denial of service.
Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows low privileged attacker to create, delete, or modify critical data, gain access to it, and cause partial denial of service; attack may impact additional products (scope change).
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle iSetup.
Vulnerability in Oracle Mobile Field Service (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to take over Oracle Mobile Field Service.
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized read access to a subset of data.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTPS to gain unauthorized access to critical data and cause a partial denial of service.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTPS to gain unauthorized access to critical data, update/insert/delete some data, and cause a partial denial of service.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and update/insert/delete some data.
Vulnerability in Oracle Marketing (component Audience) of Oracle E-Business Suite versions 12.2.3-12.2.15. It allows a low-privileged attacker with network access via HTTP to modify and read some data, but requires human interaction and may impact additional products.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
Vulnerability in MySQL Server and MySQL Cluster (component InnoDB) versions 9.7.0-9.7.3 and 26.7.0-26.7.1. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) and unauthorized modification of some data.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized access to critical data and cause a hang or frequently repeatable crash (DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS