CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Process Manufacturing Regulatory Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data, as well as unauthorized update, insert, or delete access to some data. The attack may impact additional products (scope change).
Vulnerability in Oracle Time and Labor product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow Manufacturing. Successful attacks of this vulnerability can result in takeover of Oracle Flow Manufacturing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Flow Manufacturing product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.13-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Yard Management in Oracle E-Business Suite (Internal Operations component) versions 12.2.6-12.2.15. Low privileged attacker with network access via HTTP can compromise the system, leading to takeover. CVSS 8.8.
Oracle Process Manufacturing Process Execution (part of Oracle E-Business Suite) version 12.2.15 has a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to take over the component.
Vulnerability in Oracle Time and Labor product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Oracle Purchasing (part of Oracle E-Business Suite) versions 12.2.11-12.2.15 have a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to take over the component.
Vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Vulnerability in Oracle Public Sector Payroll (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.
Vulnerability in Oracle Installed Base (component: Create Item Instance) in Oracle E-Business Suite. A low-privileged attacker via HTTP can compromise data confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Human Resources (part of Oracle E-Business Suite, component: Enterprise Command Center). A low-privileged attacker with local access can gain unauthorized access to critical data and modify it. CVSS 7.1.
Vulnerability in Oracle Human Resources (Oracle E-Business Suite) component Enterprise Command Center. Versions 12.2.14-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
In Oracle Human Resources in Oracle E-Business Suite (Data Removal Tool component) versions 12.2.3-12.2.15, a vulnerability exists. An authenticated attacker with high privileges can remotely take over Oracle Human Resources via HTTP.
Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS (UK).
Vulnerability in Oracle Work in Process (component: Internal Operations) in Oracle E-Business Suite. A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Trade Management (Oracle E-Business Suite) component Claim LOV. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Trade Management.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) component Product Diagnostic Tools. Versions 12.2.4-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS