CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-101410
High

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Business Interlink component, affecting versions 8.61-8.63. Difficult to exploit, a low-privileged attacker with HTTP network access can take over PeopleTools.

CVE-2026-101409
High

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools, Report Distribution component, affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with HTTP network access, allowing unauthorized access to critical data or complete access to all PeopleTools data.

CVE-2026-101408
Medium

Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).

CVE-2026-101407
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Change Assistant) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can unauthorizedly access critical or all data and cause partial DOS.

CVE-2026-101406
Low

Vulnerability in Siebel Apps - Marketing (component Marketing) affecting versions 17.0-26.9. A difficult-to-exploit attack by an unauthenticated attacker with network access via HTTP allows unauthorized read access to a subset of data.

CVE-2026-101405
Medium

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTPS can unauthorizedly update, insert, or delete data and read a subset of data.

CVE-2026-101404
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows a high-privileged attacker with infrastructure logon to update, insert or delete data, read a subset of data, and cause a partial denial of service.

CVE-2026-101403
Medium

Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly access critical or all data and update, insert, or delete data.

CVE-2026-101402
Low

Vulnerability in Siebel Apps - Marketing (Email Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to cause a partial denial of service.

CVE-2026-101401
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

CVE-2026-101400
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows an unauthenticated attacker with infrastructure logon to cause a partial denial of service.

CVE-2026-101399
Medium

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via SMTP can cause partial DOS.

CVE-2026-101398
High

Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).

CVE-2026-101397
Low

Vulnerability in Siebel Apps - Marketing (Marketing component) of Oracle Siebel CRM, affected versions 17.0-26.9. A difficult-to-exploit flaw allows a high-privileged attacker with HTTP network access to read a subset of application data.

CVE-2026-101396
Medium

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. A low-privileged attacker with logon to the infrastructure can unauthorizedly create, delete, or modify critical or all data.

CVE-2026-101395
Medium

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).

CVE-2026-101394
Medium

Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can unauthorizedly update, insert, or delete data.

CVE-2026-101393
Medium

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, but it requires human interaction from a person other than the attacker. Successful attacks may result in unauthorized update, insert, or delete access to some Marketing-accessible data.

CVE-2026-101392
Medium

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all Marketing-accessible data.

CVE-2026-101391
Medium

Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction and may significantly impact additional products (scope change). Successful attacks may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS