CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebLogic Server (component: Console) in versions 14.1.2.0.0 and 15.1.1.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the server.
Vulnerability in Oracle WebLogic Server (part of Oracle Fusion Middleware) versions 14.1.2.0.0 and 15.1.1.0.0. An authenticated attacker with high privileges can read a subset of data and modify critical data via HTTP, affecting other products.
Vulnerability in Oracle WebLogic Server (component: Console) versions 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with local access to the infrastructure can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data. The attack may impact additional products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker via HTTP, requiring user interaction, can access and modify data.
Vulnerability in Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via LDAP can compromise data confidentiality and integrity.
Vulnerability in Oracle Unified Directory from Oracle Fusion Middleware (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker with network access via LDAP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via T3 or IIOP can easily exploit this, leading to full system takeover.
Vulnerability in JD Edwards EnterpriseOne Solution Advisor (Solution Advisor component) allows a low-privileged attacker to take over the system over the network via HTTP. Version 9.2 is affected.
Vulnerability in JD Edwards EnterpriseOne Human Resources Management (version 9.2) in Human Resources component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.
Vulnerability in JD Edwards EnterpriseOne CRM Foundation (version 9.2) in CRM Foundation component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.
Vulnerability in JD Edwards EnterpriseOne Advanced Pricing - Procurement (version 9.2) in Advanced Pricing component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.
Vulnerability in JD Edwards EnterpriseOne Requirements Planning (version 9.2) in Requirements Planning component. Difficult to exploit, low-privileged attacker via JDENET can take over the system.
Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne General Ledger.
Vulnerability in JD Edwards EnterpriseOne Human Resources Management (Human Resources component) allows a low-privileged attacker to take over the system over the network via HTTP. Version 9.2 is affected.
Vulnerability in JD Edwards EnterpriseOne HCM Foundation (OW HR PR Foundation component) version 9.2. A low-privileged attacker with network access via HTTP can cause a hang or frequent crash (DOS) and unauthorized read access to a subset of data.
Vulnerability in JD Edwards EnterpriseOne CRM Foundation version 9.2. A low-privileged attacker with network access via HTTP can take over the CRM system.
Vulnerability in Oracle's JD Edwards EnterpriseOne CRM Foundation product (component: CRM Foundation). Affected version is 9.2. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne CRM Foundation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS