CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise the system, requiring user interaction.
Vulnerability in Oracle User Management of Oracle E-Business Suite (component: Proxy User Delegation) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle User Management.
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Vulnerability in Oracle Common Applications Calendar of Oracle E-Business Suite (component: Applications Calendar) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized read access to a subset of data.
Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar) affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized creation, deletion or modification of critical data and a partial denial of service (partial DOS).
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework) affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and successful attacks require human interaction from a person other than the attacker. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized access to critical data or complete access to all accessible data.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core) affecting versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized access to critical data or complete access to all accessible data.
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in an unauthorized hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment.
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools) affecting versions 17.0-26.7. A difficult to exploit vulnerability allows a low privileged attacker with network access via SQL to compromise the product. Successful attacks can result in takeover of Siebel CRM Development.
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces) affecting versions 17.0-26.7. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data and a partial denial of service (partial DOS).
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure). Affected supported versions are 17.0-26.7. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment.
Vulnerability in Oracle Common Applications Calendar (component: Applications Calendar) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality, integrity, and availability.
Vulnerability in Oracle Application Object Library (component: Core) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. A difficult to exploit vulnerability allows a high privileged attacker with network access via HTTP to compromise the system, with potential impact on additional products (scope change).
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality and integrity.
Vulnerability in Oracle Common Applications (component: CRM User Management Framework) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the system.
Vulnerability in Oracle CRM Technical Foundation (component: Application Framework) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality and integrity.
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality and availability.
Vulnerability in Oracle Sales Online (component: OSO Other) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, with potential impact on additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS