CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
In Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can result in takeover of the system.
Vulnerability in Oracle Project Foundation product of Oracle E-Business Suite. A low-privileged attacker with local access can take over the system.
In PeopleSoft Enterprise SCM Inventory (version 9.2), a vulnerability in the Security component allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and partially modify data.
Vulnerability in PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.
Vulnerability in PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.
Vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects. Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction.
A vulnerability in PeopleSoft Enterprise SCM Mobile Inventory Management (Security component) version 9.2. Difficult to exploit, requires logon to infrastructure and low privileges. Successful attack can lead to unauthorized access and modification of critical data and impact other products (scope change). CVSS 7.5.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. It is difficult to exploit, but an unauthenticated attacker can remotely take over the system via HTTP.
In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Vulnerability in Oracle PeopleSoft Enterprise FIN Billing Argentina (component: Billing). Affected version is 9.1. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in Oracle Access Manager (Authentication Engine component) allows a low-privileged attacker with access to the physical communication segment to compromise the system. Requires local network access.
A vulnerability in PeopleSoft Enterprise SCM Supplier Contract Management (Security component) version 9.2. Easily exploitable, requires logon to infrastructure and low privileges. Successful attack can lead to product takeover and impact other products (scope change). CVSS 8.8.
Vulnerability in PeopleSoft Enterprise FIN Cash Management. A low-privileged attacker with local access can take over the system, and the attack may affect other products.
Vulnerability in Oracle JDeveloper (Security Framework component) allows a low-privileged attacker with local access to compromise and take over the application. Exploitation is difficult.
Vulnerability in PeopleSoft Enterprise SCM Order Management. A low-privileged attacker with local access can take over the system.
Vulnerability in Oracle Communications BRM - Elastic Charging Engine. A low-privileged attacker with local access can take over the system.
Vulnerability in Oracle Production Scheduling (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with access to the physical communication segment to take over Oracle Production Scheduling. Requires user interaction.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS