CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Oracle Data Integrator (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 has an easily exploitable vulnerability by a low-privileged attacker with local access. The attack may impact other products (scope change) and result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all data.
Vulnerability in Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Vulnerability in Oracle EDI Gateway (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Process Manufacturing Financials (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Vulnerability in Siebel CRM Cloud Applications (Siebel Cloud Manager component) allows an unauthenticated attacker over HTTP to gain unauthorized access to critical data, modify it, and cause partial denial of service. Exploitation is difficult.
Vulnerability in Siebel CRM Cloud Applications. Unauthenticated attacker via HTTP can access critical data.
Vulnerability in Oracle Interaction Blending (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain unauthorized access to critical data and create, delete, or modify it.
Vulnerability in Oracle Universal Work Queue (UWQ Server Issues component) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP can exploit it, but user interaction is required. Successful attack allows unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability in Oracle Enterprise Asset Management (Internal Operations component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Content Manager (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Affects versions 22.3-26.5. A low-privileged attacker with network access via HTTP can compromise data confidentiality, and attacks may impact additional products (scope change).
Vulnerability in Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager component) versions 22.3-26.5. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or full access to all application data.
Vulnerability in Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Vulnerability in Oracle Process Manufacturing Regulatory Management (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, requires low-privileged attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and impact other products.
Vulnerability in Oracle Process Manufacturing Regulatory Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle General Ledger within Oracle E-Business Suite. A low-privileged attacker with network access via SOAP can take over the system.
Oracle Common Application Components (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has a difficult-to-exploit vulnerability that can be used by a low-privileged attacker via HTTP. Successful attack can affect other products and result in unauthorized access, data modification, and partial denial of service.
Vulnerability in Oracle Applications Framework (Search Bean component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle Applications Framework (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the framework.