CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Enterprise Command Center Framework (Core component) version V16. An unauthenticated attacker with access to the communication segment can compromise the system.
Oracle Enterprise Command Center Framework version V16 has a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the communication segment to compromise data confidentiality and integrity. The attack may affect other products.
Vulnerability in Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Affected version V16. A high privileged attacker with network access via HTTP can compromise critical data confidentiality and modify some data.
Vulnerability in Oracle Enterprise Command Center Framework (component: Core) version V16. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized update, insert, or delete of some data.
Vulnerability in Oracle Enterprise Command Center Framework from Oracle E-Business Suite (component: Core). Affected version is V16. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in Oracle GoldenGate (Libraries component) allows a low-privileged attacker with local access to easily take over the application.
Vulnerability in Oracle WebCenter Portal (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the portal.
Vulnerability in Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
In Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0, a vulnerability in the Authentication Engine component allows an unauthenticated attacker to remotely access critical data via HTTP. The vulnerability has a scope change affecting other products. CVSS 8.6 (confidentiality).
Vulnerability in Oracle WebCenter Sites (part of Oracle Fusion Middleware) allows an unauthenticated attacker via HTTP to take over the system. Exploitation is difficult.
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely compromise confidential data. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to access critical data via HTTP. The attack does not affect other products.
Vulnerability in Oracle WebCenter Sites (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modification of critical data, with possible impact on other products.
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely compromise confidential data. The attack may impact other products (scope change).
Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle SOA Suite (component: Integration Business Insight) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and impact other products.
Vulnerability in Oracle SOA Suite from Oracle Fusion Middleware (component: Integration Business Insight). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle SOA Suite (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and cause partial denial of service. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in Oracle SOA Suite (B2B Engine component) allows an unauthenticated attacker via HTTP to compromise the system. Exploitation is difficult.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS