CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with logon to the infrastructure where the product executes can compromise it if a victim performs a specific interaction. It results in full takeover (CVSS 7.8).
Vulnerability in Oracle Business Intelligence Enterprise Edition (FNDN component) affecting version 12.2.1.4.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can easily gain unauthorized access to critical data or all data accessible in the product. The vulnerability may significantly impact additional products (scope change, CVSS 7.7).
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can compromise the system. The vulnerability is difficult to exploit but results in full takeover.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can modify, delete, or access critical data and cause partial denial of service. The vulnerability is easily exploitable.
Vulnerability in Oracle BI Publisher (BI Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via SOAP can cause a hang or frequently repeatable crash (complete DOS) and modify and read some data. The vulnerability is easily exploitable.
Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webserver component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.
Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webserver-http2 component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP/2 can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affects version 3.6. A low-privileged authenticated attacker with local access can modify, delete, or access critical data. The vulnerability is easily exploitable and may impact additional products (scope change).
Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webclient-http2 component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP/2 can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can compromise the system. The vulnerability is easily exploitable.
Vulnerability in the Oracle Text component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. A low-privileged attacker with Create Index privilege and network access via Oracle Net can compromise Oracle Text. The vulnerability is difficult to exploit but may impact additional products (scope change).
Vulnerability in the RDBMS component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. A low-privileged attacker with Execute on DBMS_REDEFINITION privilege and network access via Oracle Net can compromise RDBMS. The vulnerability is easily exploitable.
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle BI Publisher (BI Publisher Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert or delete some data. CVSS 3.1 Base Score 8.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS