CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Installation). Affected version is 6.2.4. Easily exploitable by unauthenticated attacker with network access via TCP, potentially leading to takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 9.8.
A vulnerability in Oracle Product Lifecycle Analytics (version 3.6.1) allows an unauthenticated attacker via HTTP to read critical data and cause partial denial of service. Impacts may extend to other products (scope change). CVSS 9.3.
Vulnerability in Oracle Product Lifecycle Analytics (Installation Issues component) allows an unauthenticated attacker with logon to the infrastructure to gain unauthorized access and modify critical data. Attacks may impact additional products (scope change).
Vulnerability in Oracle Agile PLM (Security component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Agile PLM (component: Security). Affected version is 9.3.6. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Agile PLM. CVSS 9.8.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Endeca Application Controller) version 11.4.0. An unauthenticated attacker can take over the system via HTTP.
Vulnerability in Oracle Commerce Guided Search Platform Services (Forge component) allows an unauthenticated attacker via HTTPS to unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Commerce Guided Search Platform Services (component: Forge) version 11.4.0. An unauthenticated attacker can access all data and cause a complete denial of service (DoS) via HTTP.
Vulnerability in Oracle Commerce Guided Search Platform Services (component: Forge). Affects version 11.4.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attack can lead to full system takeover.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0) allows a low-privileged attacker with network access via HTTP to compromise the product. Attacks may impact additional products (scope change). CVSS 9.9.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker can take over the system via HTTP.
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) version 14.1.2.0.0. An unauthenticated attacker can take over the content management system via HTTP.
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. An unauthenticated attacker can take over the e-commerce platform via HTTP.
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework). Affects version 11.4.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and cause system hang or frequent crashes (DoS).
Vulnerability in Oracle Commerce Platform (component: ATG Portals) version 11.4.0. An unauthenticated attacker can take over the e-commerce platform via HTTP.
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can take over the document capture system via HTTP.
Vulnerability in Oracle Banking Trade Finance Process Management (Common component) versions 14.6.0-14.8.0. An unauthenticated attacker with network access via HTTP can compromise the system, requiring user interaction. The attack may impact other products, allowing unauthorized access, data modification, and partial DoS.
Vulnerability in PeopleSoft Enterprise HCM Talent Acquisition Manager (component: Job Opening) version 9.2. An authenticated low-privileged attacker can take over the system via HTTP, with potential impact on other products (scope change).
Vulnerability in PeopleSoft Enterprise FIN Staffing Front Office Brazil (component: Staffing) version 9.1. An authenticated low-privileged attacker can take over the system via HTTP, with potential impact on other products (scope change).