CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can, although with difficulty, create, delete, or modify critical data and gain full access to it.
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM End User.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with logon access to the infrastructure where Siebel CRM Deployment executes can take over Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data accessible in Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A low-privileged attacker with logon access to the infrastructure where Siebel CRM Deployment executes can take over Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM End User (component: Reports) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all data accessible in Siebel CRM End User.
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the application.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with logon to the infrastructure where the component executes. Successful attacks can result in takeover of the component.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the component.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via SQL. Successful attacks can result in takeover of the component.
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting) affecting versions 17.0-26.7. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can cause a hang or frequently repeatable crash (complete DOS), unauthorized update, insert or delete access, and unauthorized read access.
Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component: Base) affecting versions 14.5.0.0.0-14.9.0.0.0. Difficult to exploit, requires human interaction, but allows a low privileged attacker with network access via HTTP to take over the product.
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP. Successful attacks can result in takeover of the component.
Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Difficult to exploit, but allows a low privileged attacker with network access via HTTP to take over the product.
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI) affecting versions 17.0-26.7. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized access to critical data, unauthorized data modifications, and partial DOS.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An easily exploitable flaw allows a high-privileged attacker with network access via TCP to compromise Siebel CRM Deployment.
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Vulnerability in Oracle Siebel CRM's Siebel Apps - Life Sciences (component: Life Sciences) affecting versions 17.0-26.7. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise the system, requiring user interaction.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

