CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle BI Publisher (Web Service API component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via SOAP can create, delete or modify critical data and cause a hang or repeatable crash (DoS). CVSS 3.1 Base Score 8.1.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle BI Publisher (component: E-Business Suite - XDO) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can access critical data or all data accessible in Oracle BI Publisher via HTTP. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can access critical data or all BI Publisher data via SOAP, and also update, insert or delete some data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can, via HTTP and requiring user interaction, gain unauthorized access to critical data or all BI Publisher data, and also create, delete or modify data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: Web Server) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can access critical data or all BI Publisher data via HTTP, and also update, insert or delete some data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can, via SOAP, gain unauthorized access to create, delete or modify critical data or all BI Publisher data, and also cause a hang or frequent crashes (full DoS).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can, via HTTP, gain unauthorized access to create, delete or modify critical data or all BI Publisher data, as well as full access to data and cause partial DoS.
Vulnerability in Oracle JDeveloper (component: Resource Catalog Services) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can take over Oracle JDeveloper via HTTP.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker can, via HTTP, gain unauthorized access to critical data or all BI Publisher data, as well as update, insert or delete some data and cause partial DoS.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit, but an unauthenticated attacker can, via HTTP, gain unauthorized access to create, delete or modify critical data or all OBIEE data, as well as full access to data and cause partial DoS. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker can, via SOAP, gain unauthorized access to create, delete or modify critical data or all BI Publisher data, as well as read a subset of data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (component: BI Publisher Security) affecting version 12.2.1.4.0. It is easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized access to critical data and partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Service Administration UI) affecting version 12.2.1.4.0. It is easily exploitable by a low privileged attacker with network access via HTTP, resulting in takeover of the product.
Vulnerability in Oracle XML Gateway (component: Install) affecting versions 12.2.3-12.2.15. It is easily exploitable by a low privileged attacker with network access via HTTP, leading to unauthorized access to critical data and partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affecting version 12.2.1.4.0. It is difficult to exploit and allows an unauthenticated attacker with network access via HTTP to take over the product.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affecting version 12.2.1.4.0. It is easily exploitable by a high privileged attacker with network access via HTTP, resulting in takeover of the product.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. It is easily exploitable by a low privileged attacker with network access via LDAP, leading to unauthorized creation, deletion or modification of data and unauthorized access to critical data.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS