CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable, allows high privileged attacker via HTTP to gain unauthorized access to critical data and modify some data. Attack may impact other products (scope change).
Vulnerability in PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Affects versions 8.61-8.63. Difficult to exploit, allows unauthenticated attacker via HTTP to take over PeopleSoft Enterprise PeopleTools.
Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low privileged attacker via HTTP to gain unauthorized access to data (creation, deletion, modification), partial read access, and cause partial denial of service. Attack may impact other products (scope change).
Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via RMI to take over Oracle WebCenter Portal.
Vulnerability in Oracle WebCenter Portal (component: Composer) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle WebCenter Portal.
Vulnerability in Oracle Access Manager (component: Authentication Engine) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle Access Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via T3, IIOP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via T3, IIOP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle Identity Manager.
Vulnerability in Oracle Identity Manager (component: Security) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker can remotely compromise the system via HTTP, potentially impacting additional products. Attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker can remotely access data via T3, IIOP, potentially impacting additional products.
Vulnerability in Oracle General Ledger (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can remotely compromise the system via HTTP under difficult conditions. Attacks can result in unauthorized creation, deletion, or modification of data, unauthorized access to data, and partial denial of service.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via HTTP, affecting integrity and availability. Attacks can result in unauthorized creation, deletion, or modification of data and complete denial of service.
Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via T3, IIOP under difficult conditions. Successful attacks can result in takeover of Oracle WebLogic Server.
Vulnerability in Oracle's MySQL Cluster product (component: Cluster: NDB Operator). Affected versions are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks can cause a hang or frequently repeatable crash (complete DoS) and unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Hospitality Simphony (component: POS). Affected versions are 19.8-19.8.5, 19.9-19.9.3 and 19.10-19.10.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks can result in unauthorized access to critical data or complete access to all data.
Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks can result in takeover of the server.
Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.
Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.
Vulnerability in Oracle Outside In Technology (component: Outside In Core). Affected version is 8.5.8. Easily exploitable vulnerability allows an unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise it. Successful attacks require human interaction from a person other than the attacker and can result in takeover.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS