CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) allows an unauthenticated attacker with network access via T3/IIOP to take over the system.
Vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Access Manager (component: Authentication Engine) allows unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. CVSS 9.1.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to fully compromise the system. The attack is easy to perform.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to fully compromise the system. The attack is easy to perform.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Critical vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the server via network using TCP. The attack does not impact other products (no scope change).
In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via SOAP. Successful attack can lead to complete server takeover.
In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via HTTP. Successful attack can lead to complete server takeover.
Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack does not impact other products (no scope change).
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS