CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Marketing of Oracle E-Business Suite, Audience component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability in Oracle Product Hub of Oracle E-Business Suite, Role Based Security component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability in Oracle Product Hub of Oracle E-Business Suite, Item Catalog component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.
Vulnerability in the WebUI component of Oracle Product Workbench (Oracle E-Business Suite). A low-privileged attacker via HTTP can perform unauthorized updates, inserts, deletions, read access, and cause a partial denial of service.
Vulnerability in Oracle Supply Chain Globalization (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can perform unauthorized update, insert, delete, read access and cause partial denial of service.
Vulnerability in Oracle Call Center Technology (RDBMS and UI component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle Scripting (Scripting Admin component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle Teleservice (Oracle E-Business Suite) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can gain unauthorized read, update, insert, and delete access to data.
Vulnerability in Oracle Knowledge Management (User Interface component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle HRMS (UK) (UK Payroll component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify payroll data.
Vulnerability in Oracle iSupport (Call Back component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in the Servers component of Oracle Advanced Inbound Telephony (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read) and cause partial DoS.
Vulnerability in Oracle HRMS (New Zealand) (New Zealand Payroll component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify payroll data.
Vulnerability in Oracle HRMS (Republic of Korea) (Oracle E-Business Suite) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and write access to some payroll data.
Oracle HRMS (Japanese) versions 12.2.3-12.2.15 has a vulnerability allowing an unauthenticated attacker with network access via HTTPS to compromise the product. Human interaction is required. The attack can result in unauthorized read and write access to data.
Vulnerability in Oracle HRMS (Hong Kong) (Hong Kong Payroll component) versions 12.2.13-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify payroll data.
Vulnerability in Oracle E-Business Suite HRMS (Australia) Payroll component. A low-privileged attacker via HTTP can gain unauthorized access to critical data.
Vulnerability in the Payroll component of Oracle Payroll (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain full access to all payroll data, including critical data.
Vulnerability in Oracle Learning Management Import And Export component. A low-privileged attacker via HTTP can access critical data.
Vulnerability in the Workflow Notification Mailer component of Oracle Workflow (Oracle E-Business Suite). An unauthenticated attacker via SMTP can perform unauthorized data modifications and cause partial DoS, but exploitation is difficult.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS