CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise data confidentiality and integrity. Successful attacks require human interaction from a person other than the attacker and may impact additional products (scope change). Successful attacks can result in unauthorized creation, deletion, or modification of critical data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 6.7 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Inventory Management (Internal Operations component) versions 12.2.3-12.2.15. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of Oracle Inventory Management.
Vulnerability in Oracle Time and Labor of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows a high-privileged attacker with network access via HTTP to unauthorizedly access critical data and modify some data, potentially affecting other products.
Vulnerability in Oracle Scripting (Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access, modify, or delete critical data via HTTP.
Vulnerability in Oracle Flow Manufacturing (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.
Vulnerability in Oracle Transportation Execution (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.
Vulnerability in Oracle Service Contracts product of Oracle E-Business Suite. Requires a high-privileged attacker and user interaction, but can lead to unauthorized access to all data and unauthorized creation, deletion, or modification of critical data.
Vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A high-privileged attacker with local access can modify critical data.
Vulnerability in the Internal Operations component of Oracle Property Manager (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read).
Vulnerability in Oracle Property Manager (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.
Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.4-12.2.15. Difficult to exploit; a low-privileged attacker via HTTP can gain unauthorized read, modify access and cause partial denial of service.
Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Rapid Implementation component.
A vulnerability in Oracle Payroll allows a low-privileged attacker with local access to gain complete access to all Payroll data, with impact on other products.
Vulnerability in Oracle HRMS (Norway) (Norway Payroll component). A high-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Work in Process data.
Vulnerability in Oracle Order Management (Product Diagnostic Tools) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, affecting additional products.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access critical data via HTTP, with potential impact on other products (scope change).
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. Allows a high privileged attacker with network access via HTTP to compromise the server. Successful attacks can result in unauthorized access to critical data, full access to all server data, unauthorized update/insert/delete access, and denial of service. CVSS 3.1 Base Score 6.7.
Vulnerability in Oracle Citizen Interaction Center (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.
Vulnerability in Oracle Knowledge Management (Search) versions 12.2.5-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS