CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Java SE (component: 2D) versions 25.0.4 and 26.0.2. An unauthenticated attacker with network access via multiple protocols can cause a hang or frequently repeatable crash (complete DoS) of Java SE. The vulnerability can be exploited via APIs in the component, e.g., through a web service supplying data to APIs, and also applies to Java deployments running sandboxed applications.
Vulnerability in Oracle Access Manager (component: Agent infrastructure) allows an unauthenticated attacker with network access via SAML to compromise the system. The attack is easily exploitable and requires no user interaction.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data and the ability to create, delete, or modify data.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTPS, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure where the system runs can gain unauthorized access to critical data and the ability to create, delete, or modify data.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over the Oracle Hyperion Data Relationship Management system.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTPS), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker with local logon to the infrastructure, allowing unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 7.7 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via SQL, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via HTTP, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS