CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to perform unauthorized creation, deletion or modification of critical data and unauthorized access to critical data or complete access to all product data.
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of product data.
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of product data. May impact other products (scope change).
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 3.0.0-3.2.18. An unauthenticated attacker with network access via HTTP can exploit this, but requires user interaction. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data, as well as unauthorized read access to a subset of that data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE). An unauthenticated attacker over the network (TLS) can cause a partial denial of service (partial DoS).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP) can gain complete access to data and cause a complete denial of service (DoS).
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS