CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Cost Management of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Customer Interaction History (Outcome-Result) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON). Affected versions: MySQL Server 9.7.0-9.7.1, MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a low-privileged attacker with network access via multiple protocols. Successful attack can cause a hang or frequent crash (complete DoS) of MySQL Server or Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (Common Utilities) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in the Siebel Cloud Manager component (Siebel CRM Cloud Applications) versions 22.3-26.5. Easily exploitable, requires login and low privileges. Attacker can unauthorized update, insert or delete data and read a subset of data.
A vulnerability in Siebel CRM Cloud Applications allows a low-privileged attacker with local access to gain complete access to all application data, with impact on other products.
Vulnerability in the Siebel Cloud Manager component (Siebel CRM Cloud Applications) versions 22.3-26.5. Difficult to exploit, requires physical access to the network segment. Unauthenticated attacker can unauthorized update, insert or delete data and read a subset of data.
In Oracle Universal Work Queue (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is a difficult-to-exploit vulnerability. A high-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Site Hub (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, modify access to some data, and cause a partial denial of service (DoS).
Vulnerability in Oracle Enterprise Asset Management (component: Internal Operations) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is difficult, requires network access via HTTP.
Vulnerability in Oracle Enterprise Asset Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.
Vulnerability in Oracle Scheduler product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle U.S. Federal Financials of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly access critical data, potentially affecting other products.
Vulnerability in Oracle iSupport (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle Applications Framework component of Oracle E-Business Suite (Upload Attachments). Affects versions 12.2.8-12.2.15. A low-privileged attacker with network access via HTTP can exploit it, requiring user interaction. Successful attack allows unauthorized update, insert, or delete access to some data and read access to a subset of data.
Vulnerability in Oracle BI Publisher XML Services component. A low-privileged attacker via HTTP can access critical data.
Vulnerability in Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico). Affects version 9.2. Difficult to exploit, requires network access via HTTP and low privileges. Successful attack can lead to unauthorized creation, deletion, or modification of critical data and partial denial of service.
Vulnerability in PeopleSoft Enterprise HCM Human Resources (Security) version 9.2. Difficult to exploit, requires low privileges and Oracle Net access. Can lead to full confidentiality and integrity compromise.
A vulnerability in Oracle APEX allows a low-privileged attacker with local access to gain complete access to all APEX data.
JD Edwards EnterpriseOne Tools version 9.2.26.3 has a vulnerability in the Installation Security component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data, also affecting other products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS