CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-101444
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all data.

CVE-2026-101443
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. An easily exploitable flaw allows a low privileged attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all data.

CVE-2026-101441
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data or complete access to all data.

CVE-2026-101440
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.

CVE-2026-101439
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows an unauthenticated attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all data.

CVE-2026-101437
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager) affecting versions 22.3-26.9. A difficult to exploit flaw allows a high privileged attacker with network access via HTTP to gain unauthorized create, delete or modify access to critical data and unauthorized read access to a subset of data; attacks may significantly impact additional products (scope change).

CVE-2026-101436
Medium

Vulnerability in Oracle Siebel CRM Cloud Applications (component Siebel Cloud Manager) affecting versions 22.3-26.9. Requires high privileges and logon to the infrastructure, but can lead to unauthorized access to critical data.

CVE-2026-101435
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Porting) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with local logon, it can cause a hang or frequently repeatable crash (complete DoS) and unauthorized data modification and read access.

CVE-2026-101433
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with network access via HTTP, allowing unauthorized read access to a subset of data.

CVE-2026-101432
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with local logon, it can lead to unauthorized data modification, read access, and partial denial of service.

CVE-2026-101430
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Test Framework) affecting versions 8.61-8.63. Easily exploitable by an unauthenticated attacker with local logon, allowing unauthorized access to critical data.

CVE-2026-101426
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. Difficult to exploit, requires high privileges, local logon, and user interaction; can lead to unauthorized data modification and complete DoS, with potential impact on other products.

CVE-2026-101424
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Difficult to exploit, requires high privileges and network access via HTTP; can lead to unauthorized access to critical data, with potential impact on other products.

CVE-2026-101423
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized read access to a subset of data.

CVE-2026-101419
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component SQR) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized access to critical data.

CVE-2026-101418
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component Report Distribution) affecting versions 8.61-8.63. Easily exploitable by a low-privileged attacker with network access via HTTP, allowing unauthorized access to critical data.

CVE-2026-101413
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Analytic Server) affecting versions 8.61-8.63. A low-privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS).

CVE-2026-101412
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Analytic Server) affecting versions 8.61-8.63. A low-privileged attacker with logon to the infrastructure can unauthorizedly create, delete, or modify critical data, read a subset of data, and cause partial DOS.

CVE-2026-101408
Medium

Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).

CVE-2026-101407
Medium

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Updates Change Assistant) affecting versions 8.61-8.63. A high-privileged attacker with network access via HTTP can unauthorizedly access critical or all data and cause partial DOS.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS