CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Sales Foundation product (component: Security API) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation.
Vulnerability in the Oracle EDI Gateway product (component: EDI) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and unauthorized update, insert, or delete access to some Oracle EDI Gateway accessible data, with potential impact on additional products.
Vulnerability in Oracle EDI Gateway (All Miscellaneous EDI Issues component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to take over Oracle EDI Gateway.
Vulnerability in the Oracle EDI Gateway product (component: All Miscellaneous EDI Issues) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.
Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Analytics Server) of Oracle Analytics, affecting versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data.
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Vulnerability in Oracle Enterprise Manager Base Platform (component Enterprise Manager Install) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Enterprise Manager Base Platform.
Vulnerability in Oracle Enterprise Manager for Siebel (component Configuration Management) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Siebel.
Vulnerability in Oracle Enterprise Manager for Siebel (component Configuration Management) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Siebel.
Vulnerability in Oracle Enterprise Manager Base Platform (Security Framework component) affecting versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to cause unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
Vulnerability in Oracle TimesTen In-Memory Database (TimesTen IMDB component) affecting versions 22.1-22.1.1.43.0. A low-privileged attacker with logon access to the infrastructure where the database runs can exploit it to gain unauthorized access to critical data or complete access to all database accessible data.
Vulnerability in Oracle APEX (component: General) affecting versions 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. An unauthenticated attacker with HTTPS network access can easily exploit it to take over Oracle APEX. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Global Lifecycle Management NextGen OUI Framework (component NextGen Installer) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, and 15.1.1.0.0. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DoS) of the framework.
Vulnerability in Oracle EDI Gateway (component All Miscellaneous EDI Issues) affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.
Vulnerability in Oracle Enterprise Manager Base Platform (component Agent Next Gen) affecting versions 13.5 and 24.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.
Vulnerability in Oracle Utilities Network Management System (component: System Wide) affects multiple supported versions. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all system data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition (component: Libraries) affects multiple supported versions. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle WebLogic Server (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all server data.
Vulnerability in MySQL Cluster (component InnoDB) affecting versions 8.0.0-8.0.37. A difficult-to-exploit attack requiring physical access can cause a hang or repeatable crash (complete DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS