CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Quoting (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quoting.
Vulnerability in Oracle Contracts Integration (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain full access to critical data and perform create, delete, or modify operations.
Vulnerability in Oracle Quality (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quality.
Vulnerability in Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data, full access to all Oracle Quality data, unauthorized update/insert/delete of some data, and partial denial of service. Attacks may impact additional products (scope change). CVSS 8.2 (Confidentiality, Integrity, Availability).
Vulnerability in Oracle Lease and Finance Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain full access to critical data and perform create, delete, or modify operations.
Vulnerability in Oracle Project Contracts (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Mobile Application Server product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the server.
Vulnerability in Oracle Customer Support (component: Update Service Request) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Demand Signal Repository (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via SQL can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Price Protection (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to some data and full create, delete, or modify access.
Oracle Price Protection (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has an easily exploitable vulnerability by a low-privileged attacker with local access. The attack may impact other products (scope change) and result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all data.
In Oracle HCM Common Architecture (part of Oracle E-Business Suite, versions 12.2.3-12.2.15), a vulnerability in the Internal Operations component allows a high-privileged attacker via HTTP to take over the system.
Vulnerability in Oracle Solaris product of Oracle Systems, component Utility. Affects version 11.4. A difficult-to-exploit vulnerability allows a low-privileged attacker with network access via RAD to gain unauthorized access to critical data and partial ability to update, insert, or delete it. Attacks may significantly impact additional products (scope change).
A vulnerability in Oracle Solaris (component: Utility) in version 11.4. A difficult-to-exploit vulnerability allows a low privileged attacker with local access to compromise Oracle Solaris (CVSS 7.0).
A vulnerability in Oracle Advanced Outbound Telephony (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Advanced Outbound Telephony. CVSS 8.8.
Vulnerability in Oracle Interaction Blending from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in Oracle iSupport (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, requiring user interaction, to gain unauthorized create, delete, or modify access to critical data, potentially affecting other products.
Vulnerability in Oracle iSupport (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can access critical data, with impact on other products.
Vulnerability in Oracle iSupport (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and create, delete or modify it.
Vulnerability in Oracle iStore (component: Shopping Cart) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS