CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Unified Directory (Fusion Middleware). Unauthenticated attacker via LDAP can cause a complete denial of service (DOS).
Vulnerability in Oracle HTTP Server (component: mod_proxy) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain full access to critical data, also impacting other products.
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker to take over the system over the network via LDAP. Versions 12.2.1.4.0 and 14.1.2.1.0 are affected.
Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows an unauthenticated attacker via LDAP to gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker via LDAP to gain unauthorized access and modification of critical data, with possible impact on other products.
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker with network access via LDAP to gain unauthorized access to critical data and modify some data. The attack may impact additional products (scope change).
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker with network access via LDAP to cause a complete denial of service (DOS) through hangs or frequent crashes.
Vulnerability in Oracle Fusion Middleware's Oracle Unified Directory product (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via LDAP to compromise Oracle Unified Directory.
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit, requires low privileges and network access via LDAP. Attack may affect additional products (scope change) and lead to unauthorized creation, deletion or modification of critical data and access to it.
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via LDAP can access critical data and modify it, also impacting other products.
Vulnerability in Oracle Fusion Middleware's Oracle Unified Directory product (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via LDAP to compromise Oracle Unified Directory.
Vulnerability in Oracle Unified Directory (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to take over the system.
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker via LDAP to take over the system. Exploitation is difficult.
Vulnerability in Oracle Access Manager (component: Authentication Engine) versions 12.2.1.4.0 and 14.1.2.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Affected versions are 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.
Vulnerability in Oracle GoldenGate (Oracle GoldenGate Microservices component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1 are affected.
Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Affected versions are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to take over the system.
Vulnerability in Service Delivery Platform (Messaging Enabler component) allows a low-privileged attacker with local access to unauthorized read and modification of critical data. Attacks may impact other products.
Vulnerability in Oracle Fusion Middleware Service Delivery Platform (Messaging Enabler component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via HTTP. The attack is easily exploitable.
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker to remotely access critical data. The attack may impact other products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS