CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, requiring user interaction. Allows unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 8.7.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
Vulnerability in Oracle WebLogic Server (component: WLS Core Components) affects versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via RMI to compromise Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Scripting (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker via HTTP to fully compromise the system.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Security) versions 8.61 and 8.62. Difficult to exploit, requires logon to infrastructure, allows unauthorized access and data modification, with potential impact on other products.
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows low-privileged attacker via LDAP to gain unauthorized access to critical data, with potential impact on other products.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: nVision) versions 8.61-8.63. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires physical access to network segment, allows unauthorized access and data modification, with potential impact on other products.
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in JD Edwards EnterpriseOne US Payroll (component: Payroll) version 9.2. Difficult to exploit, allows low-privileged attacker via JDENET to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high-privileged attacker via HTTP to modify data, partially read data and cause partial denial of service, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data and modify some data, with potential impact on other products.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via RMI, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via RMI, allowing takeover of the system. CVSS score 9.8.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, but an unauthenticated attacker can compromise data integrity and confidentiality over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS