CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Oracle Advanced Collections (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.
Vulnerability in Oracle Project Portfolio Analysis (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Despite high attack complexity, a low-privileged attacker with network access can take over the system, compromising confidentiality, integrity, and availability.
Vulnerability in Oracle Project Portfolio Analysis (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can unauthorizedly modify critical data and read a subset of data.
Vulnerability in Oracle Project Portfolio Analysis (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Project Portfolio Analysis (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.
Vulnerability in Oracle Project Portfolio Analysis (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to gain unauthorized modification of critical data and read some data.
Vulnerability in Oracle US Federal Human Resources (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Scripting (part of Oracle E-Business Suite) allows an unauthenticated attacker over HTTP to compromise the system. Exploitation is difficult.
Vulnerability in Oracle E-Business Tax (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle E-Business Tax. A low-privileged attacker with local access can take over the system.
Vulnerability in Oracle E-Business Tax (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Public Sector Human Resources (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle HRMS (France) (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Treasury (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle SDP Number Portability. A low-privileged attacker with local access can take over the system, and the attack may affect other products.
Vulnerability in Oracle SDP Number Portability (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Telecommunications Billing Integrator (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Oracle Transportation Execution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.
Vulnerability in Oracle Time and Labor (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Learning Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS