CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Work in Process (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP, requiring user interaction, can access and modify data.
Vulnerability in Oracle Trade Management (Claim LOV component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Trade Management (component: Claim LOV) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Order Management within Oracle E-Business Suite (component: Product Diagnostic Tools). A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Risk Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Advanced Pricing (component: Pricing Installation) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized access to critical data and modify it.
Oracle Advanced Pricing (part of Oracle E-Business Suite) versions 12.2.14-12.2.15 have a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify some data.
Vulnerability in Oracle Advanced Pricing (component: Pricing Installation) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Advanced Pricing within Oracle E-Business Suite (component: Pricing Installation). A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Quoting (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quoting.
Vulnerability in Oracle Contracts Integration (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain full access to critical data and perform create, delete, or modify operations.
Vulnerability in Oracle Quality (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quality.
Vulnerability in Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data, full access to all Oracle Quality data, unauthorized update/insert/delete of some data, and partial denial of service. Attacks may impact additional products (scope change). CVSS 8.2 (Confidentiality, Integrity, Availability).
Vulnerability in Oracle Lease and Finance Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain full access to critical data and perform create, delete, or modify operations.
Vulnerability in Oracle Project Contracts (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Mobile Application Server product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the server.
Vulnerability in Oracle Customer Support (component: Update Service Request) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS