CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely compromise confidential data. The attack may impact other products (scope change).
Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle SOA Suite (component: Integration Business Insight) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and impact other products.
Vulnerability in Oracle SOA Suite from Oracle Fusion Middleware (component: Integration Business Insight). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle SOA Suite (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and cause partial denial of service. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
Vulnerability in Oracle SOA Suite (B2B Engine component) allows an unauthenticated attacker via HTTP to compromise the system. Exploitation is difficult.
Vulnerability in Oracle SOA Suite (Integration Business Insight component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle Identity Manager Connector (PeopleSoft component) allows an unauthenticated attacker to access critical data. The attack may impact other products.
Vulnerability in Oracle Identity Manager Connector (component: PeopleSoft Applications) versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker with network access via HTTP can gain full access to critical data and modify it, also impacting other products.
Vulnerability in Oracle Identity Manager Connector (component: Generic Unix Connector) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker with physical network segment access to unauthorized create, delete, or modify critical data and cause a complete denial of service (DOS).
Vulnerability in Oracle HTTP Server (component mod_http2.so). A low-privileged attacker with local access can take over the HTTP server.
Vulnerability in Oracle WebLogic Server (component: Console) in versions 14.1.2.0.0 and 15.1.1.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the server.
Vulnerability in Oracle WebLogic Server (part of Oracle Fusion Middleware) versions 14.1.2.0.0 and 15.1.1.0.0. An authenticated attacker with high privileges can read a subset of data and modify critical data via HTTP, affecting other products.
Vulnerability in Oracle WebLogic Server (component: Console) versions 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with local access to the infrastructure can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data. The attack may impact additional products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker via HTTP, requiring user interaction, can access and modify data.
Vulnerability in Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via LDAP can compromise data confidentiality and integrity.
Vulnerability in Oracle Unified Directory from Oracle Fusion Middleware (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker with network access via LDAP can easily exploit this vulnerability, potentially leading to full system takeover.