CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to take over Oracle iSetup.
Vulnerability in Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Affects versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to take over Oracle Sales Foundation.
Vulnerability in Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Affects versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to gain unauthorized access to data and modify it.
Vulnerability in Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to take over Oracle Sales for Handhelds.
Vulnerability in Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to take over Oracle Sales.
Vulnerability in Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. Easily exploitable, allows an unauthenticated attacker with logon to the infrastructure to gain unauthorized access to critical data, with potential impact on other products.
Vulnerability in Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to take over Oracle Trading Community.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. A low-privileged attacker can compromise confidentiality and integrity of critical data via HTTP, potentially affecting other products (scope change).
Vulnerability in Oracle Payments (component: File Transmission) versions 12.2.3-12.2.15. An unauthenticated attacker can gain unauthorized access to critical data and modify some data via HTTP.
Vulnerability in Oracle Payables (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and modify or delete it via HTTP.
Vulnerability in Oracle Payables (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker can cause a hang or frequent crashes (full DoS) of Oracle Payables via HTTP.
Vulnerability in Oracle Payments (component: File Transmission) versions 12.2.3-12.2.15. Difficult to exploit, but an unauthenticated attacker can gain unauthorized access to critical data and modify or delete it via HTTPS.
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. A low-privileged attacker with access to the infrastructure can take over the system.
Vulnerability in Oracle Payments product of Oracle E-Business Suite, component File Transmission. Affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via TCP can compromise Oracle Payments, resulting in unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 7.5 (Confidentiality impact).
Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can compromise Oracle Payments, with scope change affecting other products. Successful attacks can result in unauthorized creation, deletion, modification, and access to critical data. CVSS 7.7 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can compromise Oracle Payments, with scope change affecting other products. Successful attacks can result in unauthorized creation, deletion, modification, and access to critical data. CVSS 7.7 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Marketing Encyclopedia System (Internal Operations component) versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise the system, with scope change affecting other products. Successful attacks can result in unauthorized access to critical data. CVSS 7.7 (Confidentiality impact).
Vulnerability in Oracle Agile Engineering Data Management (Engineering Communication Interface component) version 6.2.1. An unauthenticated attacker with physical access to the communication segment can take over the system. CVSS 7.5 (Confidentiality, Integrity, Availability impacts).
Vulnerability in Oracle HRMS (US) (US Payroll - General component) versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can take over the system, with scope change affecting other products. CVSS 8.0 (Confidentiality, Integrity, Availability impacts).
Vulnerability in Oracle Essbase (Calculator component) version 21.8.1.0.0. A low privileged attacker with network access via HTTP can take over the system. CVSS 8.8 (Confidentiality, Integrity, Availability impacts).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS