CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to data, including creation, deletion or modification.
Vulnerability in Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). Affects versions 25.12-26.6. Easily exploitable, allows low privileged attacker via HTTP to gain unauthorized access to critical data and modify some data. Attack may impact other products (scope change).
Vulnerability in Siebel CRM End User product of Oracle Siebel CRM (component: Search). Affects versions 17.0-26.6. Easily exploitable, allows unauthenticated attacker with access to the physical communication segment to gain unauthorized access to data, including creation, deletion or modification.
Vulnerability in Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker with logon to the infrastructure to take over Siebel CRM Deployment.
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker via HTTP to gain unauthorized access to critical data and cause partial denial of service.
Vulnerability in Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Affects versions 17.0-26.6. Easily exploitable, allows low privileged attacker via HTTP to take over Siebel Apps - Marketing.
Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable, allows high privileged attacker via HTTP to gain unauthorized access to critical data and modify some data. Attack may impact other products (scope change).
Vulnerability in PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.
Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low privileged attacker via HTTP to gain unauthorized access to data (creation, deletion, modification), partial read access, and cause partial denial of service. Attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via RMI to take over Oracle WebCenter Portal.
Vulnerability in Oracle WebCenter Portal (component: Composer) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle WebCenter Portal.
Vulnerability in Oracle Access Manager (component: Authentication Engine) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle Access Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via T3, IIOP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via T3, IIOP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: Security) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker can remotely compromise the system via HTTP, potentially impacting additional products. Attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker can remotely access data via T3, IIOP, potentially impacting additional products.
Vulnerability in Oracle General Ledger (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can remotely compromise the system via HTTP under difficult conditions. Attacks can result in unauthorized creation, deletion, or modification of data, unauthorized access to data, and partial denial of service.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via HTTP, affecting integrity and availability. Attacks can result in unauthorized creation, deletion, or modification of data and complete denial of service.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via T3, IIOP under difficult conditions. Successful attacks can result in takeover of Oracle WebLogic Server.