CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTPS can unauthorizedly update, insert, or delete data and read a subset of data.
Vulnerability in Oracle Siebel CRM (component: Email Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly access critical or all data and update, insert, or delete data.
Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via SMTP can cause partial DOS.
Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. A low-privileged attacker with logon to the infrastructure can unauthorizedly create, delete, or modify critical or all data.
Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can, with user interaction, unauthorizedly update, insert, or delete data and read a subset of data; potential impact on other products (scope change).
Vulnerability in Oracle Siebel CRM (component: Marketing) affecting versions 17.0-26.9. An unauthenticated attacker with network access via HTTP can unauthorizedly update, insert, or delete data.
Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, but it requires human interaction from a person other than the attacker. Successful attacks may result in unauthorized update, insert, or delete access to some Marketing-accessible data.
Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data or all Marketing-accessible data.
Vulnerability in the Marketing component of Oracle Siebel CRM (versions 17.0-26.9). An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction and may significantly impact additional products (scope change). Successful attacks may result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in the Business Interlink component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, causing a hang or frequently repeatable crash (complete DoS).
Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized creation, deletion, or modification access to critical data or all Oracle REST Data Services accessible data.
Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, which may significantly impact additional products (scope change), resulting in unauthorized read access to a subset of data.
Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability requiring human interaction, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in the Core component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in the ADP component of Oracle REST Data Services (versions 24.2.0-26.1.0). A low-privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access and unauthorized read access, requiring human interaction and potentially impacting additional products.
Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible through the service.
Vulnerability in Oracle REST Data Services (ADP component) affecting versions 24.2.0-26.1.0. A low-privileged authenticated attacker with network access via HTTP can cause unauthorized update, insert, or delete access to data accessible through the service.
Vulnerability in Oracle REST Data Services (Database Actions component) affecting versions 24.2.0-26.1.0. A high-privileged attacker with network access via HTTP can cause unauthorized update, insert, or delete access, unauthorized read access, and partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS