CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle's PeopleSoft Enterprise FIN Common Objects (component: Security). Affects version 9.2. Difficult to exploit, allows unauthenticated attacker via HTTP to take over the system. CVSS 8.1.
Vulnerability in Oracle Identity Manager (component: Installer). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows low-privileged attacker with local access to take over the system. CVSS 7.8.
Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server) versions 1.0.0-1.4.18, 3.0.0-3.2.17, and 4.0.0-4.4.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Server). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to access all data. CVSS 7.5.
Vulnerability in Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet). Affects versions 5.6.28.0-5.6.28.1. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to take over system. CVSS 8.8.
Vulnerability in Oracle HRMS (Netherlands) (component: Netherlands Payroll). Affects versions 12.2.3-12.2.15. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.
Vulnerability in Oracle HRMS (US) (component: US Payroll Tax Issues). Affects versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Difficult to exploit, allows low-privileged attacker with local access to take over system. CVSS 7.0.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products (scope change).
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects version 12.2.1.4.0. A low-privileged attacker via HTTP can easily compromise confidentiality, integrity, and availability of data, including critical data, and cause partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) affects version 12.2.1.4.0. A low-privileged attacker with local access to the infrastructure, with user interaction, can take over the system.
Vulnerability in PeopleSoft Enterprise FIN Lease Administration (component: Lease Administration) affects version 9.2. A low-privileged attacker with local access, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP, under difficult conditions, can take over the system.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. An unauthenticated attacker via HTTP, under difficult conditions, can take over the system.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP can easily take over the system.
Vulnerability in the RDBMS component of Oracle Database Server affects versions 23.4.0-23.26.3. A low-privileged attacker (Authenticated User) via Oracle Net, under difficult conditions, can take over the system and impact other products.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP can easily gain unauthorized access to critical data.
Vulnerability in Oracle BI Publisher (component: Web Service API) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP can easily take over the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS