CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker via HTTPS to gain unauthorized access and modify critical data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
A vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) in version 11.4.0. A low privileged attacker with local access can easily exploit this vulnerability to gain unauthorized creation, deletion, or modification of critical data and access to all data (CVSS 7.1).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data, and cause a hang or frequently repeatable crash (full DOS).
In Oracle Commerce Guided Search / Experience Manager version 11.4.0, an unauthenticated attacker can remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce, component Experience Manager. Affects version 11.4.0. An unauthenticated attacker can remotely access critical data or all data in the system via RMI.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce, component Experience Manager. Affects version 11.4.0. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager). Affects version 11.4.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager). A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) version 11.4.0. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Payroll (component: Internal Operations) in Oracle E-Business Suite. A low-privileged attacker via HTTP can gain unauthorized access to critical data, affecting other products.
Vulnerability in Oracle Advanced Benefits (component: Affordable Care Act) versions 12.2.7-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. Attack may affect other products.
Vulnerability in Oracle Commerce Platform (Dynamo Application Framework component) version 11.4.0. An unauthenticated attacker via HTTP can compromise the system, though exploitation is difficult.
Vulnerability in Oracle Commerce Platform (version 11.4.0) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modify critical data.
In Oracle Commerce Platform version 11.4.0, a vulnerability in the Dynamo Application Framework allows an unauthenticated attacker to remotely access critical data via LDAP. CVSS 7.5 (confidentiality).
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. A low-privileged attacker with network access via HTTP can compromise the system, requiring user interaction. The attack may affect additional products. Unauthorized access to critical data and modification is possible.
Vulnerability in Oracle Communications Service Catalog and Design (component: Solution Designer) versions 8.0.0.7.0-8.3.0.2.0. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS