CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized access to critical data or complete access to all product data and cause a partial denial of service (partial DOS). Attacks may impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTPS to compromise the product.
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product.
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.
Vulnerability in Oracle Product Hub of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can compromise Oracle Product Hub. Easily exploitable, CVSS 7.2.
Vulnerability in Helidon of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Affects versions 3.0.0-3.2.20 and 4.0.0-4.5.4. A low privileged attacker with network access via HTTP can compromise Helidon, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Engineering of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Engineering, though difficult to exploit. May impact additional products (scope change). CVSS 8.2.
Vulnerability in Oracle Engineering of Oracle E-Business Suite (component: Change Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Engineering, leading to unauthorized access to critical data. May impact additional products (scope change). CVSS 7.7.
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Recall Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized data access and partial denial of service. CVSS 7.1.
Vulnerability in Oracle Bills of Material of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.13-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Bills of Material, though difficult to exploit. May impact additional products (scope change). CVSS 8.2.
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Demand Signal Repository of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Demand Signal Repository, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Demand Signal Repository (Oracle E-Business Suite), component Internal Operations, affecting versions 12.2.3-12.2.15. A low-privileged authenticated attacker with HTTP network access can gain unauthorized access to data and create, delete, or modify data. CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (Oracle E-Business Suite), component Internal Operations, affecting versions 12.2.12-12.2.15. A low-privileged authenticated attacker with HTTP network access can access critical data and cause a partial denial of service. CVSS 3.1 Base Score 8.5.
Vulnerability in Oracle JDeveloper (Oracle Fusion Middleware), component Oracle JDeveloper, affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can access critical data. CVSS 3.1 Base Score 7.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS