CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle PeopleSoft Enterprise FIN Manufacturing Brazil (component: Integration). Affects version 9.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS. Successful attack can lead to full system takeover.
Vulnerability in PeopleSoft Enterprise FIN Manufacturing Argentina (Oracle PeopleSoft) in the Manufacturing component. Affects version 9.1. Easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.1.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) in the Staffing component. Affects version 9.1. Easily exploitable by a low-privileged attacker with network access via HTTP, potentially leading to takeover of the component and impacting additional products (scope change). CVSS 9.9.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (component: eProcurement) version 9.1. An unauthenticated attacker with network access via HTTP can compromise the system, leading to unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset of data, and partial denial of service. Scope change impacts additional products.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) in the eProcurement component. Affects version 9.1. Easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.1.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (component: Integration) version 9.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, leading to unauthorized access to critical data, data modification, and partial denial of service. Attacks may impact additional products (scope change).
PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) contains a vulnerability that allows a high-privileged authenticated attacker to compromise the system via HTTP. The attack may impact other products (scope change).
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: Integration). Affected version is 9.1. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 9.8.
Vulnerability in Oracle Communications Converged Application Server allows an unauthenticated attacker via TCP/IP to take over the server. Exploitation is difficult but may affect other products.
Vulnerability in the RDBMS component of Oracle Database Server (versions 19.3-19.31 and 23.4.0-23.26.2) allows a low-privileged attacker with network access via Oracle Net to compromise RDBMS. Attacks may impact additional products (scope change). CVSS 9.9.
Vulnerability in PeopleSoft In-Memory Project Discovery (version 9.2) allows a low-privileged attacker with network access via HTTP to compromise the product. Attacks may impact additional products (scope change). CVSS 9.9.
Vulnerability in Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status). Version 9.2 is affected. An unauthenticated attacker via HTTP can access critical data and perform unauthorized updates, inserts, or deletes.
Vulnerability in PeopleSoft Enterprise FIN Program Management (Primavera Integration component) version 9.2. A low-privileged attacker with network access via HTTP can compromise the system, requiring user interaction. The attack may impact other products and allow takeover of the system.
A vulnerability in PeopleSoft Enterprise FIN Expenses (version 9.2) allows an unauthenticated attacker via HTTP to read and modify critical data and cause partial denial of service. CVSS 9.4.
Vulnerability in PeopleSoft Enterprise CRM Common Objects allows an unauthenticated attacker via HTTP to take over the system. Exploitation is difficult but may affect other products.
Vulnerability in Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access and modify critical data. CVSS 9.1.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Identity Manager. CVSS 9.8.
Vulnerability in Oracle Agile Engineering Data Management (Install component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data. It may also cause a hang or frequent crash (DOS).
Vulnerability in Oracle Agile Product Lifecycle Management for Process (Product Quality Management component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Reporting). Affected version is 6.2.4. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 9.8.