CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. An unauthenticated attacker can remotely access via HTTP to read a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. A low-privileged attacker can remotely exploit via HTTP to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. A low-privileged attacker can remotely exploit via HTTP under difficult conditions to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. An unauthenticated attacker can remotely access via HTTP to read a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. An unauthenticated attacker can remotely access via HTTP to read a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. An unauthenticated attacker can remotely exploit via HTTP, but requires user interaction, to gain unauthorized update and read access to some data. Attack may impact additional products (scope change).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. An unauthenticated attacker can remotely exploit via HTTP, but requires user interaction, to gain unauthorized update and read access to some data. Attack may impact additional products (scope change).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. An unauthenticated attacker can remotely exploit via HTTP to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 3.2.18. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS score 6.5.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 3.2.18. Easily exploitable by low-privileged attacker via HTTP, allows unauthorized update, insert or delete of some data and unauthorized read access to a subset of data. CVSS score 5.4.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 3.2.18. Difficult to exploit by unauthenticated attacker via HTTP, allows unauthorized access to critical data or complete access to all data and unauthorized update, insert or delete of some data. CVSS score 6.5.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 3.2.18. Easily exploitable by unauthenticated attacker via HTTP, allows partial denial of service (partial DoS). CVSS score 5.3.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 4.5.0. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized read access to a subset of data. CVSS score 5.3.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 3.2.19. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized update, insert or delete of some data. CVSS score 5.3.
Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 4.5.0. Easily exploitable by low-privileged attacker with logon to infrastructure, allows unauthorized access to critical data or complete access to all data and unauthorized update, insert or delete of some data. CVSS score 6.1.
Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Difficult to exploit by low-privileged attacker with logon to infrastructure, allows unauthorized access to critical data or complete access to all data. May impact additional products (scope change). CVSS score 5.6.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker with logon to infrastructure, requires human interaction. Allows unauthorized update, insert or delete of some data, unauthorized read access to a subset of data, and partial denial of service. CVSS score 4.2.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized read access to a subset of data. CVSS score 5.3.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows an unauthenticated attacker to perform unauthorized data modification and cause partial denial of service.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows a low-privileged attacker to perform unauthorized modification and read of some data, and may impact additional products (scope change).