CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Marketing.
Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Alert.
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.6-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle User Management.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Applications DBA.
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affected supported versions are 12.2.5-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Order Management, with potential significant impact on additional products (scope change).
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager, resulting in unauthorized access to critical data.
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Quality.
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to and modify data.
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.7-12.2.15. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to take over Oracle Lease and Finance Management.
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to and modify data, with potential impact on additional products (scope change).
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data.
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Forms.
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to create, delete or modify critical data and gain unauthorized access to it.
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to take over Oracle Forms.
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to create, delete or modify critical data, gain unauthorized access to it and cause partial denial of service; requires user interaction and may impact additional products (scope change).
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, and the attack may impact additional products (scope change).
Vulnerability in Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can, under difficult conditions, gain unauthorized access to critical data, modify or delete it, and cause partial denial of service.
Vulnerability in Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain full access to critical data, modify some data, and cause partial denial of service.
Vulnerability in Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to completely take over Oracle Spares Management.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS