CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle E-Business Suite Pasta product (component: Internal Operations) versions 12.2.3-12.2.15. Allows a high-privileged attacker with local access to take over the component.
Vulnerability in the Configuration component of Oracle Applications Technology Stack (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires login and high privileges. Attacker can unauthorized create, delete or modify critical data and gain full access to it.
Vulnerability in Oracle Applications DBA (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain full access to critical data, impacting other products.
Vulnerability in Oracle Enterprise Asset Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized update, insert, delete, or read access to some data. CVSS 4.2 (Confidentiality and Integrity impacts).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. An unauthenticated attacker with local access can cause a complete denial of service (DOS).
Vulnerability in Oracle Cost Management of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Vulnerability in Oracle Customer Interaction History (Outcome-Result) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON). Affected versions: MySQL Server 9.7.0-9.7.1, MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a low-privileged attacker with network access via multiple protocols. Successful attack can cause a hang or frequent crash (complete DoS) of MySQL Server or Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (Common Utilities) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Vulnerability in the Siebel Cloud Manager component (Siebel CRM Cloud Applications) versions 22.3-26.5. Easily exploitable, requires login and low privileges. Attacker can unauthorized update, insert or delete data and read a subset of data.
A vulnerability in Siebel CRM Cloud Applications allows a low-privileged attacker with local access to gain complete access to all application data, with impact on other products.
Vulnerability in the Siebel Cloud Manager component (Siebel CRM Cloud Applications) versions 22.3-26.5. Difficult to exploit, requires physical access to the network segment. Unauthenticated attacker can unauthorized update, insert or delete data and read a subset of data.
In Oracle Universal Work Queue (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is a difficult-to-exploit vulnerability. A high-privileged attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Site Hub (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, modify access to some data, and cause a partial denial of service (DoS).
Vulnerability in Oracle Enterprise Asset Management (component: Internal Operations) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is difficult, requires network access via HTTP.
Vulnerability in Oracle Enterprise Asset Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.
Vulnerability in Oracle Scheduler product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Vulnerability in Oracle U.S. Federal Financials of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly access critical data, potentially affecting other products.
Vulnerability in Oracle iSupport (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability in Oracle Applications Framework component of Oracle E-Business Suite (Upload Attachments). Affects versions 12.2.8-12.2.15. A low-privileged attacker with network access via HTTP can exploit it, requiring user interaction. Successful attack allows unauthorized update, insert, or delete access to some data and read access to a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS