CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affects version 3.6. A low-privileged authenticated attacker with local access can modify, delete, or access critical data. The vulnerability is easily exploitable and may impact additional products (scope change).
Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webclient-http2 component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP/2 can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.
Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can compromise the system. The vulnerability is easily exploitable.
Vulnerability in the Oracle Text component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. A low-privileged attacker with Create Index privilege and network access via Oracle Net can compromise Oracle Text. The vulnerability is difficult to exploit but may impact additional products (scope change).
Vulnerability in the RDBMS component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. A low-privileged attacker with Execute on DBMS_REDEFINITION privilege and network access via Oracle Net can compromise RDBMS. The vulnerability is easily exploitable.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle BI Publisher product (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle BI Publisher product (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert or delete some data. CVSS 3.1 Base Score 8.5.
Vulnerability in Oracle JDeveloper (Resource Catalog Services component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and cause a partial denial of service. CVSS 3.1 Base Score 8.2.
Vulnerability in Oracle Web Services Manager (Web Services Agent component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and update, insert or delete some data. CVSS 3.1 Base Score 8.2.
Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) affecting version 3.6.1. A low privileged attacker with logon to the infrastructure can create, delete or modify critical data and gain unauthorized access to it. CVSS 3.1 Base Score 8.4.
Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) affecting version 3.6.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over the product. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) affecting version 3.6.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over the product. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Product Lifecycle Analytics product (component: Core) affecting version 3.6.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle Agile PLM product (component: Event Java PX) affecting version 9.3.6. A high privileged attacker with network access via T3 or IIOP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) affecting version 11.4.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause a partial denial of service. CVSS 3.1 Base Score 7.1.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) affecting version 11.4.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to take over the product. CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Forge component) affecting version 11.4.0. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over the product. CVSS 3.1 Base Score 7.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS