CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP, potentially impacting other products.
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. A high privileged attacker can remotely compromise the system via HTTPS, potentially impacting other products.
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely access and modify data via HTTP.
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Application Testing Suite. Affected version is 13.3.0.1. An unauthenticated attacker can remotely access and modify data via HTTP.
Vulnerability in Siebel Apps - Self Service (Oracle Siebel CRM), component Helpdesk/Training. Affected versions are 17.0-26.6. An unauthenticated attacker can remotely access and modify data via HTTP, requiring user interaction, with impact on other products.
Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely modify data and cause a complete denial of service (DoS) via HTTP.
Vulnerability in Oracle Demand Planning (Oracle Supply Chain), component Internal Operations. Affected versions are 12.1 and 12.2. A low privileged attacker can remotely access and modify data via HTTP, with impact on other products.
Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via HTTP.
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over RMI, allowing unauthorized data access and modification. CVSS score 9.1.
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Hyperion Profitability and Cost Management (component: Deployment) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing unauthorized data access and modification. CVSS score 9.1.
Vulnerability in Oracle Essbase (component: Infrastructure) version 21.8.1.0.0. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Reports Developer (component: Security and Authentication) version 14.1.2.0.0. Easily exploitable by an unauthenticated attacker over HTTP, allowing unauthorized data access and modification. Attacks may impact additional products (scope change). CVSS score 9.3.
Vulnerability in Oracle Reports Developer (component: Security and Authentication) version 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with access to the physical network segment, allowing takeover of the system. Attacks may impact additional products (scope change). CVSS score 9.6.
Vulnerability in Oracle Reports Developer (component: Security and Authentication) version 14.1.2.0.0. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle Reports Developer (component: Security and Authentication) version 14.1.2.0.0. Easily exploitable by an unauthenticated attacker over SOAP, allowing unauthorized data access and modification. CVSS score 9.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS