CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in JD Edwards EnterpriseOne US Payroll (component: Payroll) version 9.2. Difficult to exploit, allows low-privileged attacker via JDENET to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high-privileged attacker via HTTP to modify data, partially read data and cause partial denial of service, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data and modify some data, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, but an unauthenticated attacker can compromise data integrity and confidentiality over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle WebCenter Content (Content Server) version 14.1.2.0.0. An attacker with low privileges and local access can compromise data confidentiality and integrity. The attack may impact other products (scope change).
Vulnerability in Helidon (Imperative Web Server component) version 4.5.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle Unified Directory (OUD Core component) versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker can gain unauthorized access to critical data via LDAP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle's PeopleSoft Enterprise PeopleTools product (component: Tuxedo) affects versions 8.61-8.63. It is difficult to exploit but allows a low-privileged attacker with local access to take over the system. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an unauthenticated attacker remotely via LDAP. Successful attacks can result in unauthorized access to critical data or complete access to all data in Oracle Unified Directory.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: PeopleCode) affects versions 8.61-8.63. It is easily exploitable by a high-privileged attacker remotely via HTTP. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Configuration Manager) affects versions 8.61-8.63. It is easily exploitable by a low-privileged attacker remotely via SQL. Successful attacks can result in complete takeover of PeopleSoft Enterprise PeopleTools.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Data Mover) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges, local access, and user interaction. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as partial denial of service.
Vulnerability in Service Delivery Platform (component: Messaging Enabler) affects versions 14.1.2.0.0 and 12.2.1.4.0. It is difficult to exploit by an unauthenticated attacker remotely via TCP. Successful attacks can result in unauthorized data modification and complete denial of service (DoS).