CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-46947
High

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to take control of the system. Affects versions 12.2.3-12.2.15.

CVE-2026-46942
High

Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Process Manufacturing Process Planning.

CVE-2026-46940
High

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management.

CVE-2026-46939
High

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite allows low privileged attackers with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

CVE-2026-46938
High

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning) allows a high privileged attacker with network access via HTTP to compromise Oracle Cost Management. The impact on confidentiality, integrity, and availability is significant.

CVE-2026-46937
High

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite, affecting the General Ledger Update Transform, Reports component. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle iSetup.

CVE-2026-46935
High

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul.

CVE-2026-46934
High

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul.

CVE-2026-46932
High

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite, affecting component: Internal Operations. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to unauthorized access to critical data.

CVE-2026-46931
High

A vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite allows low privileged attackers with network access via HTTP to compromise the system. Versions 12.2.6-12.2.15 are affected by this easily exploitable vulnerability.

CVE-2026-46929
High

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning) allows a low privileged attacker with network access via HTTP to compromise Oracle Cost Management. Affected versions are 12.2.3-12.2.15.

CVE-2026-46928
High

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTPS to compromise Oracle Spares Management. Affected versions are 12.2.3-12.2.15.

CVE-2026-46927
High

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows an unauthenticated attacker with network access via SOAP to compromise Oracle Receivables.

CVE-2026-46926
High

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM, affecting the Siebel Cloud Manager component. It allows a low privileged attacker with access to the infrastructure where Siebel CRM Cloud Applications runs to compromise these applications.

CVE-2026-46925
High

Vulnerability in the Siebel CRM Cloud Applications product of Oracle (component: Siebel Cloud Manager) affects versions 17.0-26.5. It allows an unauthenticated attacker with access to the physical communication segment to compromise the Siebel CRM Cloud Applications.

CVE-2026-46922
High

A vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.

CVE-2026-46921
High

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM, affecting the Siebel Cloud Manager component. It allows an easily exploitable attack by a low privileged attacker with network access via HTTP, potentially leading to takeover of Siebel CRM Cloud Applications.

CVE-2026-46920
High

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM, affecting versions 17.0-26.5. It allows an unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications.

CVE-2026-46916
High

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite, affecting the Quality Management Specs component. Easily exploitable by a low privileged attacker with network access via HTTP, potentially leading to takeover of Oracle Process Manufacturing Product Development.

CVE-2026-46915
High

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS