CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Purchasing within Oracle E-Business Suite (component: G-Invoicing) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).
Vulnerability in Oracle Report Manager within Oracle E-Business Suite (component: Reports Security) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data and partial denial of service (partial DoS).
Vulnerability in Oracle Financials for Asia/Pacific within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.8-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to it, and partial denial of service (partial DoS).
Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).
Vulnerability in Oracle iRecruitment (Internal Operations component) versions 12.2.3-12.2.15. An unauthenticated attacker with physical access to the communication segment can gain unauthorized access to critical data and modify or delete it.
Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data and modification, and the attack may impact additional products (scope change).
Vulnerability in Oracle Banking Origination within Oracle Financial Services Applications (component: Onboarding Batch Processes) affecting versions 14.5.0.0.0-14.9.0.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Banking Origination.
Vulnerability in Helidon (helidon-microprofile-security component) versions 4.0.0-4.5.4. A low-privileged attacker with network access via HTTP can gain unauthorized update/insert/delete and read access to data.
Vulnerability in Oracle Product Hub within Oracle E-Business Suite (component: Item Catalog) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.
Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.
Vulnerability in Oracle US Federal Human Resources (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can perform unauthorized creation, deletion, or modification of critical data and gain unauthorized read access to a subset of data.
Vulnerability in Oracle Advanced Benefits (component: Self-serv What-if Analysis) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Advanced Benefits, potentially impacting additional products.
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Vulnerability in Helidon (WebSocket component) versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS).
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.14-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring human interaction, leading to hang or frequently repeatable crash (complete DOS) and unauthorized update, insert, or delete access to data. CVSS 3.1 Base Score 8.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS