CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM Siebel Apps - Life Sciences product (eDetailing component). Affects versions 17.0-26.7. Easily exploitable, no authentication required, requires network access via HTTP and user interaction. Attacks may lead to unauthorized creation, deletion, modification, or access to data.
Vulnerability in Oracle E-Business Suite Oracle Proposals product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to unauthorized access to critical data.
Vulnerability in Oracle E-Business Suite Oracle Field Service product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to unauthorized access to critical data.
Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and network access via HTTP. Attacks may impact additional products (scope change) and lead to takeover of Oracle Spares Management.
Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may lead to takeover of Oracle Spares Management.
Vulnerability in Oracle E-Business Suite Oracle Spares Management product (Internal Operations component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges and network access via HTTP. Attacks may lead to takeover of Oracle Spares Management.
Vulnerability in Oracle E-Business Suite Oracle iStore product (Shopping Cart component). Affects versions 12.2.3-12.2.15. Easily exploitable, requires low privileges, network access via HTTP, and user interaction. Attacks may impact additional products (scope change) and lead to unauthorized creation, deletion, modification, or access to data.
Vulnerability in the Oracle iStore product (Shopping Cart component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle iStore. The vulnerability may also significantly impact additional products (scope change).
Vulnerability in the Oracle iStore product (Shopping Cart component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can compromise Oracle iStore. The vulnerability is easily exploitable.
Vulnerability in the Oracle iStore product (Shopping Cart component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker via HTTP can create, delete, or modify critical data and gain unauthorized access to it. The vulnerability is easily exploitable.
Vulnerability in the Oracle Web Applications Desktop Integrator product (File download component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTPS can compromise the product. The vulnerability may also significantly impact additional products (scope change).
Vulnerability in the Oracle Site Hub product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker via HTTP can create, delete, or modify critical data and gain unauthorized read access to a subset of it. The vulnerability is easily exploitable.
Vulnerability in the Oracle Sales product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle Sales. The vulnerability may also significantly impact additional products (scope change).
Vulnerability in the Oracle Sales Offline product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can compromise Oracle Sales Offline. The vulnerability is easily exploitable.
Vulnerability in the Oracle Sales Offline product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle Sales Offline. The vulnerability may also significantly impact additional products (scope change).
Vulnerability in the Oracle Sales Online product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle Sales Online, requiring human interaction from a person other than the attacker. The vulnerability may also significantly impact additional products (scope change).
Vulnerability in the Oracle Report Manager product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can take over Oracle Report Manager. The vulnerability is easily exploitable.
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Sales Online.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTPS to compromise Oracle Report Manager, resulting in unauthorized access to critical data and partial denial of service.
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTPS to compromise Oracle Report Manager.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS