CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A low privileged attacker with logon to the infrastructure, under difficult exploit conditions, can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure, requiring user interaction, can take over PeopleSoft Enterprise PeopleTools.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Environment Mgmt) affects versions 8.61-8.63. A high privileged attacker with logon to the infrastructure can perform unauthorized update, insert or delete access, read a subset of data, and cause partial denial of service.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Business Interlink) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized update, insert or delete access and read a subset of data, with potential impact on additional products (scope change).
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: LDAP) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Portal) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can perform unauthorized update, insert or delete access and read a subset of data.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Security) affects versions 8.61-8.63. An unauthenticated attacker with network access via HTTP, under difficult exploit conditions, can gain access to critical data or all accessible data and perform unauthorized update, insert or delete access.
Vulnerability in Oracle Siebel CRM Integration (EAI component) affecting versions 17.0-26.9. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification, potentially impacting other products.
Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component) affecting versions 8.61-8.63. A low-privileged attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle E-Business Suite Applications DBA (Internal Operations component) affecting versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can lead to unauthorized access to critical data.
Vulnerability in Oracle JDeveloper (ADF Faces component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with logon to the infrastructure can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (E1 Dev Platform Tech - UNIX component) affecting versions 9.2.0.0-9.2.26.5. A high-privileged attacker with logon can perform unauthorized modification, read data, and cause partial denial of service.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon can create, delete, or modify critical data, read a subset, and cause hang or repeatable crashes (complete DoS).
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with JDENET network access can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with access to the physical communication segment can access and modify critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. An unauthenticated attacker with HTTP network access can gain unauthorized access to critical data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with JDENET network access can cause hang or repeatable crashes (complete DoS), modify data, and read a subset.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with network access via JDENET can cause a hang or repeatable crash (complete DoS) and gain unauthorized read and update access to some data.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (Installation Security component) affecting versions 9.2.0.0-9.2.26.5. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all accessible data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS