CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-46973
High

Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite, affecting the Internal Operations component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Outsourced Mfg for Discrete Industries.

CVE-2026-46972
High

Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to take control of the system. Affects versions 12.2.3-12.2.15.

CVE-2026-46971
High

Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite, affecting the Internal Operations component. It allows a low privileged attacker with network access via HTTP to compromise Oracle HR Intelligence.

CVE-2026-46970
High

Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.

CVE-2026-46969
High

Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite, affecting the Internal Operations component. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to takeover of Oracle Financials for EMEA.

CVE-2026-46967
High

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite, affecting the authorization component. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to system takeover.

CVE-2026-46966
High

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite, affecting Work Provider Site Level Administration. It allows a low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue.

CVE-2026-46965
High

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite, affecting Work Provider Site Level Administration. Supported versions 12.2.3-12.2.15 are easily exploitable by a low privileged attacker with network access via HTTP.

CVE-2026-46962
High

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Affected versions are 12.2.3-12.2.15.

CVE-2026-46961
High

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Supported versions affected are 12.2.3-12.2.15.

CVE-2026-46960
High

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to take over Oracle Project Portfolio Analysis. Affects versions 12.2.3-12.2.15.

CVE-2026-46959
High

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting.

CVE-2026-46958
High

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting.

CVE-2026-46957
High

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal.

CVE-2026-46956
High

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite, affecting the Internal Operations component. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to the takeover of Oracle Property Manager by a high-privileged attacker with network access via HTTP.

CVE-2026-46955
High

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions affected are 12.2.3-12.2.15, and the vulnerability is difficult to exploit, requiring human interaction.

CVE-2026-46953
High

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite, affecting the UK Payroll component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle HRMS (UK).

CVE-2026-46952
High

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality.

CVE-2026-46951
High

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) allows a low privileged attacker with network access via HTTP to compromise Oracle Quality. This vulnerability can be easily exploited in versions 12.2.3-12.2.15.

CVE-2026-46950
High

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Advanced Outbound Telephony.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS