CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.9-12.2.15). A low-privileged attacker with network access via HTTP can fully compromise Oracle Applications Framework. CVSS 8.8 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can fully compromise Oracle Applications Framework. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in the Oracle Applications Framework product (component: Personalization) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via SOAP can easily exploit this vulnerability to take over the system.
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A high-privileged attacker with network access via HTTP can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of data. Attacks may impact additional products (scope change). CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (version 26.01.0.0.0). A difficult-to-exploit flaw requires logon to the infrastructure, user interaction, and may impact additional products (scope change). A low-privileged attacker can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.5 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can take over the system. CVSS 3.1 Base Score 7.2.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Actions component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify data. CVSS 3.1 Base Score 8.5.
Vulnerability in Oracle BI Publisher (Administration component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to and modify data, requiring user interaction. CVSS 3.1 Base Score 7.6.
Vulnerability in Oracle BI Publisher (Web Service API component) affecting version 12.2.1.4.0. A low privileged attacker with network access via SOAP can gain unauthorized access to critical data. CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle BI Publisher (Administration component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over the system. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Installation component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with logon to the infrastructure can take over the system. CVSS 3.1 Base Score 7.8.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting version 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.0.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via SOAP can take over the system. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle BI Publisher (Web Service API component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via SOAP can create, delete or modify critical data and cause a hang or repeatable crash (DoS). CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle BI Publisher (component: E-Business Suite - XDO) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can access critical data or all data accessible in Oracle BI Publisher via HTTP. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can access critical data or all BI Publisher data via SOAP, and also update, insert or delete some data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can, via HTTP and requiring user interaction, gain unauthorized access to critical data or all BI Publisher data, and also create, delete or modify data. Attacks may impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS