CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read, write, and partial denial of service in Oracle Contracts Integration.
A vulnerability in Oracle Contracts Integration of Oracle E-Business Suite allows an unauthenticated attacker to modify critical data. Exploitation is difficult (high AC).
A vulnerability in Oracle Project Contracts (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read and write access to some data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Public Sector Financials data.
Vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can perform unauthorized update, insert, delete or read access. Requires user interaction.
A vulnerability in Oracle Lease and Finance Management (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Oracle Self-Service Human Resources (component: Manager Self-Service) versions 12.2.3-12.2.15 have a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Successful attacks can result in unauthorized access to critical data or full access to all Oracle Self-Service Human Resources data.
Vulnerability in Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.9-12.2.15. Low privileged attacker with logon can cause hang or crash (DOS) and unauthorized read/write/update of data.
A vulnerability in Oracle HRMS (UK) (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Requires human interaction and may impact additional products. Successful attack can lead to unauthorized update, insert, delete, or read access to data.
Vulnerability in Oracle Cost Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows a high-privileged attacker with network access via HTTP to take over Oracle Cost Management.
Vulnerability in Oracle Advanced Benefits (Oracle E-Business Suite) version 12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Advanced Benefits data.
In Oracle EDI Gateway (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
In Oracle EDI Gateway (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Price Protection of Oracle E-Business Suite, Internal Operations component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability in Oracle Common Applications Calendar (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, delete access and cause partial denial of service.
In Oracle U.S. Federal Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
Vulnerability in Oracle Bills of Material of Oracle E-Business Suite, Web Services component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite, Self Service Benefits component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS