CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Oracle Fusion Middleware's Helidon product (Imperative Web Server component) version 4.5.0 allows an unauthenticated attacker to compromise Helidon via HTTP, resulting in unauthorized data modification, full access to all Helidon data, and partial denial of service.
A vulnerability in Oracle Fusion Middleware's Helidon product (Imperative Web Server component) version 4.5.0 allows an unauthenticated attacker to compromise Helidon via HTTP, resulting in unauthorized data modification and full access to all Helidon data.
A vulnerability in Oracle Fusion Middleware's Helidon product (Imperative Web Server component) version 3.2.18 allows an unauthenticated attacker to compromise Helidon via HTTP, resulting in unauthorized data modification and full access to all Helidon data.
A vulnerability in Oracle Fusion Middleware's Helidon product (Imperative Web Server component) version 4.5.0 allows an unauthenticated attacker to compromise Helidon via HTTP, resulting in a complete takeover of Helidon.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS 3.1 Base Score 9.8 (high impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1 (impact on confidentiality and integrity).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1 (impact on confidentiality and integrity).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data, unauthorized access to data, and cause partial denial of service. CVSS 3.1 Base Score 9.4 (impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data, unauthorized access to data, and cause partial denial of service. CVSS 3.1 Base Score 9.4 (impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS 3.1 Base Score 9.8 (high impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS 3.1 Base Score 9.8 (high impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Database Server Portable Clusterware component (versions 19.3-19.32, 21.3-21.23, 23.4.0-23.26.3). Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data and cause a complete hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 9.1 (impact on integrity and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS 3.1 Base Score 9.8 (high impact on confidentiality, integrity, and availability).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized access to data and perform unauthorized update, insert, or delete access to some data. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.3 (impact on confidentiality and integrity).
Vulnerability in the Portable Clusterware component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with access to the physical communication segment can take over the component. CVSS score is 9.6.
Vulnerability in the Portable Clusterware component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with access to the physical communication segment can take over the component. CVSS score is 9.6.
Vulnerability in Oracle BI Publisher (Web Service API component) affects versions 8.2.0.0.0 and 26.1.0.0.0. A low-privileged attacker with network access via SOAP can take over Oracle BI Publisher. CVSS score is 9.9.
Vulnerability in Oracle Agile PLM (Security component) affects version 9.3.6. An unauthenticated attacker with network access via HTTP can take over Oracle Agile PLM. CVSS score is 9.8.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) affects version 11.4.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to data and modify it. User interaction is required. CVSS score is 9.3.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) affects version 11.4.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to data and modify it. CVSS score is 9.1.