CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Demand Signal Repository of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Demand Signal Repository, leading to unauthorized access and modification of data. CVSS 8.1.
Vulnerability in Oracle Demand Signal Repository (Oracle E-Business Suite), component Internal Operations, affecting versions 12.2.3-12.2.15. A low-privileged authenticated attacker with HTTP network access can gain unauthorized access to data and create, delete, or modify data. CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (Oracle E-Business Suite), component Internal Operations, affecting versions 12.2.12-12.2.15. A low-privileged authenticated attacker with HTTP network access can access critical data and cause a partial denial of service. CVSS 3.1 Base Score 8.5.
Vulnerability in Oracle JDeveloper (Oracle Fusion Middleware), component Oracle JDeveloper, affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can access critical data. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle JDeveloper (Oracle Fusion Middleware), component Security Framework, affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with HTTP network access can take over Oracle JDeveloper. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle Identity Manager (Oracle Fusion Middleware), component OIM Legacy UI, affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with HTTP network access can access data and create, delete, or modify data, but user interaction is required. CVSS 3.1 Base Score 8.1.
Vulnerability in PeopleSoft Enterprise FIN Engineering Brazil (Oracle PeopleSoft), component Engineering, affecting version 9.1. A low-privileged authenticated attacker with local access can take over the system. CVSS 3.1 Base Score 7.8.
Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy, component SEPP, affecting versions 26.1.200 and 25.2.201. A low-privileged authenticated attacker with HTTP network access can access data and create, delete, or modify data; the vulnerability is difficult to exploit but may impact other products. CVSS 3.1 Base Score 8.2.
Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy, component SEPP, affecting versions 26.1.200 and 25.2.201. An unauthenticated attacker with access to the communication segment can access critical data and update, insert, or delete data. CVSS 3.1 Base Score 7.1.
Vulnerability in Oracle Coherence (Oracle Fusion Middleware), component Core, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged authenticated attacker with HTTP network access can take over Oracle Coherence; the vulnerability is difficult to exploit. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Coherence (Oracle Fusion Middleware), component Core, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged authenticated attacker with TCP network access can access data and create, delete, or modify data. CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle Coherence (Core component) affecting versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Coherence.
Vulnerability in Oracle Coherence (Core component) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via multiple protocols to compromise Oracle Coherence.
Vulnerability in Enterprise Command Center Framework of Oracle E-Business Suite (Security component) affecting version V16. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to data.
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise it.
Vulnerability in Oracle XML Gateway of Oracle E-Business Suite (Install component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to data and cause partial denial of service.
Vulnerability in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3. A difficult to exploit flaw allows an unauthenticated attacker with network access via Oracle Net to compromise RDBMS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS