CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.26)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data and cause a partial denial of service via HTTP. CVSS 7.1.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTP. Potential impact on other products (scope change). CVSS 8.5.
Vulnerability in Oracle XML Gateway (part of Oracle E-Business Suite) in versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and cause a partial denial of service via HTTP. CVSS 7.1.
Vulnerability in Oracle WebCenter Portal (Portlet Services component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle WebCenter Portal. CVSS 3.1 Base Score 7.7.
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle WebCenter Sites. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.
Vulnerability in Oracle Managed File Transfer (MFT Runtime Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via T3 or IIOP can unauthorizedly create, delete or modify critical data, read a subset of data, and cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 8.3.
Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.5.
Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over the connector, and the impact may extend to additional products (scope change). CVSS 3.1 Base Score 8.3.
Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via TCP to unauthorizedly create, delete or modify critical data and access all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.7.
Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with logon access to the infrastructure where the connector executes can take over the connector. CVSS 3.1 Base Score 7.8.
Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.6.
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit, requires access to the physical communication segment and user interaction. Successful attack can lead to takeover of the system.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and complete denial of service.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker with logon to infrastructure. Successful attack can lead to takeover of PeopleTools.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Report Distribution) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of PeopleTools.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: SQR) affects versions 8.61-8.63. It is difficult to exploit, requires high privileges and user interaction. Successful attack can lead to takeover of PeopleTools and impact other products.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is difficult to exploit, requires low privileges and logon to infrastructure. Successful attack can lead to takeover of PeopleTools.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Cube Manager) affects versions 8.61-8.63. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized modification of data and complete denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS