CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via SOAP to compromise Oracle Web Services Manager, resulting in unauthorized access to critical data and the ability to cause a hang or frequently repeatable crash (complete DOS).
Vulnerability in the Oracle Net Services component of Oracle Database Server (versions 23.4.0-23.26.3). An unauthenticated attacker with network access via Oracle Net can easily exploit this flaw to cause a hang or frequent crashes (complete DoS) of Oracle Net Services. CVSS 7.5 (Availability impact).
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.9-12.2.15). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Applications Framework data, as well as unauthorized update, insert, or delete access to some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.9-12.2.15). A low-privileged attacker with network access via HTTP can fully compromise Oracle Applications Framework. CVSS 8.8 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Helidon (WebSocket component) of Oracle Fusion Middleware (versions 4.0.0-4.5.4). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or frequent crashes (complete DoS) of Helidon. CVSS 7.5 (Availability impact).
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.9-12.2.15). A low-privileged attacker with network access via HTTP can fully compromise Oracle Applications Framework. CVSS 8.8 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Applications Framework (Personalization component) of Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can fully compromise Oracle Applications Framework. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Siebel CRM Integration (Open Integration component) of Oracle Siebel CRM (versions 25.12-26.7). An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Siebel CRM Integration data. CVSS 7.5 (Confidentiality impact).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A high-privileged attacker with network access via HTTP can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of data. Attacks may impact additional products (scope change). CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (version 26.01.0.0.0). A difficult-to-exploit flaw requires logon to the infrastructure, user interaction, and may impact additional products (scope change). A low-privileged attacker can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.5 (Confidentiality, Integrity, and Availability impacts).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can take over the system. CVSS 3.1 Base Score 7.2.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Actions component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify data. CVSS 3.1 Base Score 8.5.
Vulnerability in Oracle BI Publisher (Administration component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to and modify data, requiring user interaction. CVSS 3.1 Base Score 7.6.
Vulnerability in Oracle BI Publisher (Web Service API component) affecting version 12.2.1.4.0. A low privileged attacker with network access via SOAP can gain unauthorized access to critical data. CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle BI Publisher (Administration component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over the system. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Installation component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with logon to the infrastructure can take over the system. CVSS 3.1 Base Score 7.8.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting version 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.0.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via SOAP can take over the system. CVSS 3.1 Base Score 8.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS