CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Siebel CRM Cloud Applications (component: Siebel Cloud Manager) in versions 22.3-26.6. A low-privileged attacker with network access via HTTP can compromise the system. The attack may lead to unauthorized creation, deletion, or modification of data and full access to data.
Vulnerability in Oracle U.S. Federal Financials (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can fully take over the system. No user interaction is required.
Vulnerability in PeopleSoft Enterprise CC Common Application Objects (component: Common Application Objects) in version 9.2. An unauthenticated attacker with network access via Oracle Net can fully take over the system. The attack is difficult to exploit but requires no user interaction.
Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (component: Production) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data and partial denial of service.
Vulnerability in Oracle BI Publisher (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can compromise the system via HTTP, leading to unauthorized access, modification, or deletion of critical data, as well as partial denial of service.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen) affects versions 13.5 and 24.1. A low-privileged attacker with local access to the infrastructure can take over the platform.
Vulnerability in Oracle Enterprise Asset Management (component: Linear Asset Management) affects versions 12.2.3-12.2.15. A low-privileged attacker can, via HTTP and with user interaction, gain unauthorized access to critical data and modify some data, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain complete access to critical data, with potential impact on other products.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. Difficult to exploit, but an unauthenticated attacker can take over the system via HTTP.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can fully compromise the system. CVSS score is 7.8.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP, under difficult exploitation conditions and requiring user interaction, can compromise the system. CVSS score is 7.1.
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and perform unauthorized modifications. CVSS score is 7.1.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Event Management) affects versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can perform unauthorized modifications to critical data, gain partial access to data, and cause partial denial of service. CVSS score is 8.6.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Application Config Console) affects versions 13.5 and 24.1. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in JD Edwards EnterpriseOne Tools (component: Installation Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
Vulnerability in JD Edwards EnterpriseOne Orchestrator (component: E1 IOT Orchestrator Security) affects versions 9.2.0.0-9.2.26.4. A low-privileged attacker with network access via HTTP can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS