CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Banking Origination within Oracle Financial Services Applications (component: Onboarding Batch Processes) affecting versions 14.5.0.0.0-14.9.0.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Banking Origination.
Vulnerability in Oracle Product Hub within Oracle E-Business Suite (component: Item Catalog) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.
Vulnerability in Oracle US Federal Human Resources (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can perform unauthorized creation, deletion, or modification of critical data and gain unauthorized read access to a subset of data.
Vulnerability in Oracle Advanced Benefits (component: Self-serv What-if Analysis) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Advanced Benefits, potentially impacting additional products.
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.14-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring human interaction, leading to hang or frequently repeatable crash (complete DOS) and unauthorized update, insert, or delete access to data. CVSS 3.1 Base Score 8.2.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via TCP, leading to unauthorized access to critical data and partial DOS. CVSS 3.1 Base Score 8.2.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and complete DOS. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Demand Signal Repository. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS