CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Public Sector Payroll (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.
Vulnerability in Oracle Installed Base (component: Create Item Instance) in Oracle E-Business Suite. A low-privileged attacker via HTTP can compromise data confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Human Resources (part of Oracle E-Business Suite, component: Enterprise Command Center). A low-privileged attacker with local access can gain unauthorized access to critical data and modify it. CVSS 7.1.
Vulnerability in Oracle Human Resources (Oracle E-Business Suite) component Enterprise Command Center. Versions 12.2.14-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
In Oracle Human Resources in Oracle E-Business Suite (Data Removal Tool component) versions 12.2.3-12.2.15, a vulnerability exists. An authenticated attacker with high privileges can remotely take over Oracle Human Resources via HTTP.
Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS (UK).
Vulnerability in Oracle Work in Process (component: Internal Operations) in Oracle E-Business Suite. A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Trade Management (Oracle E-Business Suite) component Claim LOV. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Trade Management.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) component Product Diagnostic Tools. Versions 12.2.4-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
In Oracle Contracts Integration (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, an easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP, requiring human interaction. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.
Vulnerability in Oracle Contracts Integration (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Lease and Finance Management (part of Oracle E-Business Suite) versions 12.2.11-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the component. CVSS 7.5.
In Oracle Lease and Finance Management in Oracle E-Business Suite (Internal Operations component) versions 12.2.14-12.2.15, a vulnerability exists. An authenticated attacker with high privileges can remotely take over Oracle Lease and Finance Management via HTTP.
Vulnerability in Oracle Product Workbench (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
A vulnerability in Oracle Price Protection (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read access to some data and modify critical data. CVSS 7.1.
Vulnerability in Oracle Product Workbench (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Price Protection (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Bills of Material (Oracle E-Business Suite) component Internal Operations. Versions 12.2.13-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS