CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the system and potentially impacting other products (scope change). CVSS 3.1 Base Score 9.9.
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via TCP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
Vulnerability in Oracle Document Management and Collaboration (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product (component: Metrics) affecting versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle Applications Framework product (component: Personalization) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via SOAP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. A low privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle BI Publisher product (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle BI Publisher product (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Product Lifecycle Analytics product (component: Core) affecting version 3.6.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in the Oracle Agile PLM product (component: Event Java PX) affecting version 9.3.6. A high privileged attacker with network access via T3 or IIOP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
Vulnerability in the Oracle Data Integrator product (component: Console / Repository Explorer) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Vulnerability in Oracle Siebel CRM Deployment (component: Siebel Management Console) affecting versions 17.0-26.7. A high privileged authenticated attacker with network access via HTTP can take over the system, and the attack may also impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS