CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can modify or delete data and gain access to all data accessible in the system.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can modify or delete data and gain access to all data accessible in the system.
Vulnerability in Oracle Siebel Apps - Financial Services (component: Financial Accounts) affecting versions 17.0-26.7. An unauthenticated attacker with network access via HTTP can access all data and cause a hang or frequently repeatable crash (complete DoS) of the system.
Vulnerability in Oracle Siebel CRM Deployment (component: Server Infrastructure) affecting versions 17.0-26.7. A high privileged authenticated attacker with network access via HTTP can take over the system, and the attack may also impact additional products (scope change).
Vulnerability in Oracle Siebel CRM End User (component: Open UI) affecting versions 17.0-26.7. An unauthenticated attacker with network access via SOAP can modify or delete data and gain access to all data accessible in the system.
Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via SOAP can take over the system.
Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low privileged attacker with Test Manager for Web Apps privilege and network access via HTTP can access and modify critical data and cause a partial denial of service (partial DoS), and the attack may impact additional products (scope change).
Vulnerability in Oracle Fusion Middleware Oracle Forms (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can take over the system.
Vulnerability in Oracle Fusion Middleware Oracle Forms (component: Forms Services, C/S, Charmode) affecting versions 12.2.1.19.0 and 14.1.2.0.0. A high privileged authenticated attacker with network access via HTTP can take over the system, and the attack may also impact additional products (scope change).
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms, and attacks may impact additional products (scope change). CVSS 3.1 Base Score is 9.0.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via TCP can gain unauthorized access to critical data and modify or delete it. CVSS 3.1 Base Score is 9.1.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. A high privileged attacker with network access via HTTP can compromise Oracle Forms, and attacks may impact additional products (scope change). CVSS 3.1 Base Score is 9.1.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms, and attacks may impact additional products (scope change). CVSS 3.1 Base Score is 10.0.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Forms (component: Forms Services, C/S, Charmode) affects versions 12.2.1.19.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Forms. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle Internet Directory (component: OID LDAP Server) affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via T3 or IIOP can compromise Oracle Internet Directory. CVSS 3.1 Base Score is 9.8.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A high privileged attacker with network access via HTTP can compromise Oracle WebCenter Portal, and attacks may impact additional products (scope change). CVSS 3.1 Base Score is 9.1.
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS