CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Learning Management (E-Business Suite). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction.
Vulnerability in Oracle Service Fulfillment Manager (Fulfillment Engine component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
Vulnerability in Oracle Service Fulfillment Manager (Fulfillment Engine component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Service Fulfillment Manager (component: Fulfillment Engine) versions 12.2.3-12.2.15. Allows a high-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and gain full access to all data.
Oracle Labor Distribution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.
Vulnerability in Oracle Public Sector Financials (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
Vulnerability in Oracle Public Sector Financials (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected: 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks can result in takeover. CVSS 7.2 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Public Sector Payroll product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Public Sector Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Capacity (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data, and attacks may impact additional products (scope change).
Vulnerability in Oracle Customer Care within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Shipping Execution product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Inventory Management (Core Receiving component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Property Manager (Internal Operations component) versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to gain unauthorized access to all data and modify some data.
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Project Intelligence within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Warehouse Management (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker with network access via HTTP to take over the warehouse management system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS