CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via TCP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via TCP, leading to unauthorized access to critical data and partial DOS. CVSS 3.1 Base Score 8.2.
Vulnerability in Oracle Fusion Middleware Helidon product (component: LRA) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can compromise Helidon, leading to unauthorized update, insert, delete, and read access to some Helidon accessible data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: helidon-media-multipart) affects versions 3.0.0-3.2.20. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Helidon.
Vulnerability in Oracle Fusion Middleware Helidon product (component: JSON) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Helidon.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and complete DOS. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Demand Signal Repository. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.
Vulnerability in Oracle Document Management and Collaboration (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a high privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized access to critical data or complete access to all product data and cause a partial denial of service (partial DOS). Attacks may impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTPS to compromise the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS