CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export) in versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Learning Management. Successful attacks can result in unauthorized update, insert or delete access to some data, unauthorized read access, and partial denial of service. CVSS 6.3.
A vulnerability in Oracle Quality (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
A vulnerability in Oracle HRMS (US) (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle Succession planning of Oracle E-Business Suite, Succession plan component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
In Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise data confidentiality. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data or complete access to all Oracle Production Scheduling data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).
A difficult-to-exploit vulnerability in Oracle Time and Labor (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification of critical data.
Vulnerability in Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Time and Labor. Requires human interaction and may impact additional products. Successful attack can lead to unauthorized update, insert, delete, or read access to data.
Oracle Time and Labor (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has a vulnerability allowing a high-privileged attacker to unauthorizedly create, delete, or modify critical data, access it, and cause partial DoS.
Vulnerability in Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attack can lead to unauthorized access to critical data or complete access to all data.
A difficult-to-exploit vulnerability in Oracle Contracts Integration allows a low-privileged attacker via HTTP to gain unauthorized read and write access to some data.
Vulnerability in Oracle Contracts Integration (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data integrity, gaining unauthorized create, delete, or modify access to critical data.
Oracle Contracts Integration versions 12.2.3-12.2.15 has a vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Human interaction is required. The attack may significantly impact additional products (scope change) and result in unauthorized read and write access to data.
An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read, write, and partial denial of service in Oracle Contracts Integration.
A vulnerability in Oracle Contracts Integration of Oracle E-Business Suite allows an unauthenticated attacker to modify critical data. Exploitation is difficult (high AC).
A vulnerability in Oracle Project Contracts (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read and write access to some data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Public Sector Financials data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can perform unauthorized update, insert, delete or read access. Requires user interaction.
A vulnerability in Oracle Lease and Finance Management (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Oracle Self-Service Human Resources (component: Manager Self-Service) versions 12.2.3-12.2.15 have a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Successful attacks can result in unauthorized access to critical data or full access to all Oracle Self-Service Human Resources data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS