CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.14-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring human interaction, leading to hang or frequently repeatable crash (complete DOS) and unauthorized update, insert, or delete access to data. CVSS 3.1 Base Score 8.2.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment to take over Oracle Mobile Application Server. CVSS 3.1 Base Score 7.5.
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) affecting versions 12.2.3-12.2.15. Easily exploitable by an unauthenticated attacker with network access via TCP, leading to unauthorized access to critical data and partial DOS. CVSS 3.1 Base Score 8.2.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and complete DOS. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Demand Signal Repository. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 8.1.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 8.8.
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a high privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized access to critical data or complete access to all product data and cause a partial denial of service (partial DOS). Attacks may impact additional products (scope change).
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTPS to compromise the product.
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS