CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Oracle iStore (part of Oracle E-Business Suite, versions 12.2.3-12.2.15), a vulnerability in the Shopping Cart component allows a high-privileged attacker via HTTP to take over the system.
Vulnerability in Oracle Supply Chain Trading Connector (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this, but user interaction is required. Successful attack can result in takeover of Oracle Bills of Material. CVSS 8.0 (Confidentiality, Integrity, Availability).
Vulnerability in Oracle Cost Management (Costing Transaction Errors component) versions 12.2.3-12.2.15. Difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over the cost management system.
Vulnerability in Oracle Compensation Workbench (component: Compensation Workbench) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized access to critical data and modify it.
Oracle Compensation Workbench (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has an easily exploitable vulnerability by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access to critical data and the ability to modify it.
Vulnerability in Oracle TeleSales (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Sales Offline (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high-privileged attacker with network access via HTTP. Successful attack can lead to takeover of Oracle Sales Offline and impact other products.
Vulnerability in Oracle Sales Offline within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Sales Offline (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data, modify it, and cause a partial denial of service (partial DOS).
In Oracle Receivables (part of Oracle E-Business Suite, versions 12.2.3-12.2.15), a vulnerability in the Internal Operations component allows a high-privileged attacker via HTTP to take over the system.
Vulnerability in Oracle Receivables product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle iReceivables (component: AR Web Utilities) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Trading Community (component: Party Search UI) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
A vulnerability in Oracle iReceivables (Oracle E-Business Suite, component: AR Web Utilities) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle iReceivables. CVSS 8.8.
Vulnerability in Oracle Workflow (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via SMTP to take over the system.
Vulnerability in Oracle Payments (component: File Transmission) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Oracle Applications Framework (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has an easily exploitable vulnerability by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access to critical data and the ability to modify it.
Vulnerability in Oracle Financials Common Modules (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can unauthorizedly modify critical data and read a subset of data.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS