CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Order Management (Product Diagnostic Tools) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, affecting additional products.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access critical data via HTTP, with potential impact on other products (scope change).
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. Allows a high privileged attacker with network access via HTTP to compromise the server. Successful attacks can result in unauthorized access to critical data, full access to all server data, unauthorized update/insert/delete access, and denial of service. CVSS 3.1 Base Score 6.7.
Vulnerability in Oracle Citizen Interaction Center (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.
Vulnerability in Oracle Knowledge Management (Search) versions 12.2.5-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle Price Protection Internal Operations component. A low-privileged attacker via HTTP can access critical data.
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.
Vulnerability in Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart) versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attack can lead to unauthorized access to critical data or complete access to all data.
Vulnerability in Oracle iStore (Shopping Cart) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Collaboration History component.
Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
A vulnerability in Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks can result in unauthorized creation, deletion or modification of critical data or all Oracle Cost Management accessible data, as well as unauthorized access to critical data or complete access to all Oracle Cost Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Cost Management. CVSS 3.1 Base Score 6.2.
Vulnerability in Oracle E-Business Intelligence (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle E-Business Intelligence (component: Internal Operations) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is difficult, requires network access via HTTP.
Vulnerability in Oracle iSetup of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle TeleSales (Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Application Object Library product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle Application Object Library (component: AOL Generic Loader) versions 12.2.3-12.2.15. Allows a high-privileged attacker with local access to take over the component.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS