CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-security-providers-http-auth) affecting versions 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. A difficult-to-exploit flaw allows an unauthenticated network attacker via HTTP to gain unauthorized access to critical Helidon data, potentially impacting additional products.
Vulnerability in Oracle Helidon (component helidon-webclient-http2) versions 4.0.0-4.5.5 and 27.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to a hang or frequently repeatable crash (complete DOS).
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-security-providers-idcs-mapper) affecting versions 3.0.0-3.2.21 and 4.0.0-4.5.5. A difficult-to-exploit flaw allows a low-privileged attacker logged into the infrastructure to gain unauthorized access to critical Helidon data, potentially impacting additional products.
Vulnerability in Helidon (component helidon-webserver-http2) affecting versions 4.0.0-4.5.5. A difficult-to-exploit attack via HTTP/2 allows an unauthenticated network attacker to cause a partial denial of service.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-common-concurrency-limits) affecting versions 4.0.0-4.5.5 and 27.0.0. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to modify some Helidon data and cause a partial denial of service.
Vulnerability in Oracle Fusion Middleware's Helidon product (component: helidon-health) affecting versions 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to gain unauthorized read access to a subset of Helidon data.
Vulnerability in Oracle Cost Management (component Cost Planning) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to takeover of the system.
Vulnerability in Oracle Application Object Library (component DB Privileges) versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with logon to the infrastructure, leading to takeover of the system.
Vulnerability in Oracle Supply Chain's Oracle Agile PLM product (component: Import) affecting version 9.3.6. An easily exploitable flaw allows an unauthenticated attacker logged into the infrastructure to gain unauthorized access to critical data or all Oracle Agile PLM accessible data.
Vulnerability in Oracle Supply Chain's Oracle Agile PLM product (component: Acollect) affecting version 2.6. A difficult-to-exploit flaw allows an unauthenticated network attacker via TLS to gain unauthorized access to critical data or all Oracle Agile PLM accessible data.
Vulnerability in Oracle Agile PLM (component Acollect) version 2.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Commerce Platform (component Dynamo Commerce Server) version 11.4.0. Easily exploitable by a low-privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and partial read access.
Vulnerability in Oracle E-Business Suite's Oracle Purchasing product (component: PO View Document) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized access to critical data or all Oracle Purchasing accessible data.
Vulnerability in Oracle E-Business Suite's Oracle Purchasing product (component: Approvals) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated network attacker via HTTP to modify some Oracle Purchasing data and read a subset of data, requiring user interaction and potentially impacting additional products.
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle E-Business Suite's Oracle Payroll product (component: Element Types, Links, Entries) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized create, delete or modify access to critical Oracle Payroll data.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields) affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. CVSS 3.1 Base Score 7.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS