CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Advanced Benefits (part of Oracle E-Business Suite) version 12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite (component: Internal Operations). Affects version 12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Benefits, potentially impacting additional products (scope change). Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. CVSS 7.7 (Integrity impacts).
Vulnerability in TeleSales (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise TeleSales.
Vulnerability in Oracle Payables (Oracle E-Business Suite) component Internal Operations. Versions 12.2.8-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Payables.
Vulnerability in Oracle EDI Gateway (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
Vulnerability in Oracle Product Hub (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the component, with impact on other products (scope change). CVSS 8.5.
Vulnerability in Oracle Product Hub (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Product Hub.
Vulnerability in Oracle Product Hub (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in Oracle Process Manufacturing Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in Oracle Process Manufacturing Logistics of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Customers Online (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in Oracle Process Manufacturing Product Development (Oracle E-Business Suite) component Quality Management Specs. Version 12.2.15 is affected. A low-privileged attacker with network access via HTTP can compromise this product.
Vulnerability in Oracle Process Manufacturing Systems (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Systems. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Document Management and Collaboration (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Vulnerability in Oracle HCM Configuration Workbench (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) component Staffing. Version 9.1 is affected. A low-privileged attacker with network access via HTTP can compromise this product.
In PeopleSoft Enterprise FIN Common Objects Argentina (part of Oracle PeopleSoft) version 9.1, an easily exploitable vulnerability allows an unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change) and result in unauthorized access to critical data and modification capabilities.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS