CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.
Vulnerability in Oracle Labor Distribution (Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS).
A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.
A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.
A vulnerability in Oracle iSupplier Portal (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.
Vulnerability in Oracle iSupplier Portal (versions 12.2.3-12.2.15). Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.
Vulnerability in Oracle Property Manager (versions 12.2.3-12.2.15) allows a high-privileged attacker with local logon to read a subset of data.
A vulnerability in Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data read access and partial denial of service.
In Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Internal Operations component. Difficult to exploit, allows a high-privileged attacker with local access to unauthorized read access to a subset of data. CVSS 1.9.
Vulnerability in Oracle Order Entry (component: Internal Operations) versions 12.2.3-12.2.15. Allows a high-privileged attacker with local access to compromise the system, leading to unauthorized data modification and partial denial of service.
In Oracle E-Business Intelligence (versions 12.2.3-12.2.15), a vulnerability in the Definition component allows a high-privileged attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data, requiring user interaction.
In JD Edwards EnterpriseOne Tools version 9.2.26.3, a difficult-to-exploit vulnerability in the Installation Security component allows an unauthenticated attacker with access to the communication segment, with user interaction, to gain unauthorized read and write access to some data.
In PeopleSoft Enterprise FIN eSettlements version 9.2, an easily exploitable vulnerability in the eSettlements component allows an authenticated attacker with high privileges and local access to gain unauthorized read access to a subset of data.
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Allows a low-privileged attacker with local access to read unauthorized data, potentially affecting other products.
Vulnerability in Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange) in versions 17.0-26.5. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some Siebel CRM Integration data. CVSS 3.1 Base Score 3.7 (Integrity impact).
Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the Data Visualization Tools component. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.
Vulnerability in Oracle JDeveloper (ADF Faces component) allows a low-privileged attacker, under difficult conditions, unauthorized read access to a subset of data. Attack requires network access via HTTP.
Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the ADF Faces component. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.
A vulnerability in JD Edwards EnterpriseOne Tools version 9.2.26.3. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data modification and partial denial of service.
Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 (component: Interoperability Security) has a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access via JDENET to cause a partial denial of service (partial DOS).