CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) versions 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. A low-privileged attacker with local access can fully compromise the system.
Vulnerability in Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Affected versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data or full access to all Oracle Configure to Order data. Attacks may impact additional products (scope change). CVSS 7.7 (Confidentiality).
Vulnerability in Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Affected versions 12.2.9-12.2.15. A low privileged attacker with network access via HTTP can compromise all data confidentiality and integrity.
Vulnerability in Oracle HRMS (UK) (component: UK Payroll) versions 12.2.8-12.2.15. Allows a low-privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle HRMS (US) product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with local access can compromise the system, though exploitation is difficult.
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HRMS (UK) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HRMS (UK). CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts).
Vulnerability in Oracle Application Object Library (component: Core) versions 12.2.3-12.2.15. Easily exploitable, allows an unauthenticated attacker via HTTP to gain unauthorized access to all library data.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
Vulnerability in Oracle Application Object Library (component: DB Privileges) versions 12.2.3-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Vulnerability in Oracle Application Object Library (component: Core) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modify critical data.
Vulnerability in Oracle Applications DBA product (Oracle E-Business Suite) in ADPatch component. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Applications DBA (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
Vulnerability in Oracle GoldenGate (Config Service Executable component) versions 23.4-23.26.2. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Affected versions 14.6.0-14.8.0. A low privileged attacker with network access via HTTP can compromise all data confidentiality and integrity.
Vulnerability in Oracle Banking Trade Finance (component: Infrastructure) versions 14.6.0-14.8.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
A vulnerability in Oracle MES for Process Manufacturing (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, requires network access via HTTP and user interaction. Successful attack can lead to unauthorized access to critical data and data modification. CVSS 8.2.
Vulnerability in Oracle WebCenter Enterprise Capture product (Oracle Fusion Middleware) in Client Bundle component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle WebCenter Enterprise Capture product (Oracle Fusion Middleware) in Client Bundle component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Communications Unified Inventory Management (component: Security). Affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in MySQL Server and MySQL Cluster (Oracle MySQL) allows a high-privileged attacker with network access via multiple protocols to take over the server. Affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS