CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, requiring user interaction. Allows unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 8.7.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
Vulnerability in Oracle Scripting (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker via HTTP to fully compromise the system.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Security) versions 8.61 and 8.62. Difficult to exploit, requires logon to infrastructure, allows unauthorized access and data modification, with potential impact on other products.
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows low-privileged attacker via LDAP to gain unauthorized access to critical data, with potential impact on other products.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: nVision) versions 8.61-8.63. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires physical access to network segment, allows unauthorized access and data modification, with potential impact on other products.
Vulnerability in JD Edwards EnterpriseOne US Payroll (component: Payroll) version 9.2. Difficult to exploit, allows low-privileged attacker via JDENET to fully compromise the system.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high-privileged attacker via HTTP to modify data, partially read data and cause partial denial of service, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data and modify some data, with potential impact on other products.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, but an unauthenticated attacker can compromise data integrity and confidentiality over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle WebCenter Content (Content Server) version 14.1.2.0.0. An attacker with low privileges and local access can compromise data confidentiality and integrity. The attack may impact other products (scope change).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit by unauthenticated attacker with network access via HTTP, allowing unauthorized creation, deletion or modification of critical data as well as unauthorized access to critical data. CVSS 7.4 (Confidentiality and Integrity impact).
Vulnerability in Oracle Unified Directory (OUD Core component) versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker can gain unauthorized access to critical data via LDAP. The attack does not extend beyond this product (no scope change).
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP. The attack does not extend beyond this product (no scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS