CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can access critical data or all system data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Server). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to access all data. CVSS 7.5.
Vulnerability in Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet). Affects versions 5.6.28.0-5.6.28.1. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to take over system. CVSS 8.8.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires local access and low privileges. Successful attack can cause a hang or frequent crashes (complete DoS).
Vulnerability in Oracle HRMS (Netherlands) (component: Netherlands Payroll). Affects versions 12.2.3-12.2.15. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker over network (HTTP). Successful attack can allow unauthorized modification, read access, and partial denial of service.
Vulnerability in Oracle Database Server Portable Clusterware component (versions 19.3-19.32, 21.3-21.23, 23.4.0-23.26.3). Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data and cause a complete hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 9.1 (impact on integrity and availability).
Vulnerability in Oracle HRMS (US) (component: US Payroll Tax Issues). Affects versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.
Vulnerability in the RDBMS component of Oracle Database Server, affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. Easily exploitable by unauthenticated attacker over network (Oracle Net). Successful attack can allow unauthorized read access to a subset of data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Difficult to exploit, allows low-privileged attacker with local access to take over system. CVSS 7.0.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products (scope change).
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects version 12.2.1.4.0. A low-privileged attacker via HTTP can easily compromise confidentiality, integrity, and availability of data, including critical data, and cause partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) affects version 12.2.1.4.0. A low-privileged attacker with local access to the infrastructure, with user interaction, can take over the system.
Vulnerability in PeopleSoft Enterprise FIN Lease Administration (component: Lease Administration) affects version 9.2. A low-privileged attacker with local access, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (SQL). Successful attack can allow unauthorized creation, deletion, modification of data and full access to data.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker over network (HTTP). Successful attack can cause complete DoS, as well as unauthorized modification and read access to data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Difficult to exploit, requires low privileges, network access (HTTP) and user interaction. Successful attack can allow full access to data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS