CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Price Protection Internal Operations component. A low-privileged attacker via HTTP can access critical data.
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart) versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attack can lead to unauthorized access to critical data or complete access to all data.
Vulnerability in Oracle iStore (Shopping Cart) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Collaboration History component.
Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
A vulnerability in Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks can result in unauthorized creation, deletion or modification of critical data or all Oracle Cost Management accessible data, as well as unauthorized access to critical data or complete access to all Oracle Cost Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Cost Management. CVSS 3.1 Base Score 6.2.
Vulnerability in Oracle E-Business Intelligence (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle E-Business Intelligence (component: Internal Operations) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is difficult, requires network access via HTTP.
Vulnerability in Oracle iSetup of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle TeleSales (Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Application Object Library product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle Application Object Library (component: AOL Generic Loader) versions 12.2.3-12.2.15. Allows a high-privileged attacker with local access to take over the component.
Vulnerability in Oracle E-Business Suite Pasta product (component: Internal Operations) versions 12.2.3-12.2.15. Allows a high-privileged attacker with local access to take over the component.
Vulnerability in the Configuration component of Oracle Applications Technology Stack (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires login and high privileges. Attacker can unauthorized create, delete or modify critical data and gain full access to it.
Vulnerability in Oracle Applications DBA (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain full access to critical data, impacting other products.
Vulnerability in Oracle Enterprise Asset Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized update, insert, delete, or read access to some data. CVSS 4.2 (Confidentiality and Integrity impacts).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. An unauthenticated attacker with local access can cause a complete denial of service (DOS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS