CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite, affecting Work Provider Site Level Administration. It allows a low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue.
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite, affecting Work Provider Site Level Administration. Supported versions 12.2.3-12.2.15 are easily exploitable by a low privileged attacker with network access via HTTP.
Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Affected versions are 12.2.3-12.2.15.
Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Supported versions affected are 12.2.3-12.2.15.
Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to take over Oracle Project Portfolio Analysis. Affects versions 12.2.3-12.2.15.
Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting.
Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting.
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal.
Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite, affecting the Internal Operations component. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to the takeover of Oracle Property Manager by a high-privileged attacker with network access via HTTP.
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions affected are 12.2.3-12.2.15, and the vulnerability is difficult to exploit, requiring human interaction.
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite, affecting the UK Payroll component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle HRMS (UK).
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality.
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) allows a low privileged attacker with network access via HTTP to compromise Oracle Quality. This vulnerability can be easily exploited in versions 12.2.3-12.2.15.
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Advanced Outbound Telephony.
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to take control of the system. Affects versions 12.2.3-12.2.15.
Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Process Manufacturing Process Planning.
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.
Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite allows low privileged attackers with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning) allows a high privileged attacker with network access via HTTP to compromise Oracle Cost Management. The impact on confidentiality, integrity, and availability is significant.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite, affecting the General Ledger Update Transform, Reports component. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle iSetup.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS