CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Oracle Access Manager (component: Authentication Engine), a vulnerability can be exploited by an unauthenticated attacker over the network via HTTP. Successful attack can lead to complete takeover of Oracle Access Manager.
A vulnerability in PeopleSoft Enterprise SCM Order Management (version 9.2) allows an unauthenticated attacker via HTTP to read and modify critical data. CVSS 9.1.
Vulnerability in Oracle Demantra Demand Management (component: Product Security) versions 12.2.3-12.2.15. An authenticated low-privileged attacker can take over the system via HTTP, with potential impact on other products (scope change).
Vulnerability in Oracle Data Integrator (Rest Service component) allows unauthenticated attacker via HTTPS to take over the system. CVSS 9.8.
Vulnerability in Oracle Work in Process (component: Internal Operations). Affects versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP can take over the system.
Vulnerability in Oracle Application Object Library (Core component) allows a low-privileged attacker via HTTPS to unauthorizedly create, delete, or modify critical data and gain full access to all data. Attacks may impact additional products (scope change).
Vulnerability in Oracle BI Publisher (Web Service API component) versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. Easily exploitable by a low-privileged attacker with network access via HTTP. Attacks may significantly impact other products (scope change). Successful attacks can result in unauthorized creation, deletion, or modification of critical data, access to critical data, and partial denial of service. CVSS 9.9.
Vulnerability in Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager). Affected versions are 22.3-26.5. A low-privileged attacker with network access via HTTP can compromise the application, potentially impacting other products.
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify critical data.
Vulnerability in Oracle WebCenter Content (Web Content Management component) allows unauthenticated attacker via HTTP to take over the system, with impact on other products (scope change). CVSS 10.0.
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to unauthorized create, delete, or modify critical data and gain full access to it. User interaction is required, and the attack may impact additional products.
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) in the Content Server component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires human interaction. May impact additional products (scope change). Can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.3.
Vulnerability in Oracle JD Edwards EnterpriseOne Tools (component: Installation Security). Affected version is 9.2.26.3. A low-privileged attacker with network access via HTTP can compromise the tools, potentially impacting other products.
Vulnerability in PeopleSoft Enterprise CC Common Application Objects (component: Common Application Objects). Affects version 9.2. An unauthenticated attacker via HTTP can access and modify critical data.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
Vulnerability in Oracle Identity Manager (component: OIM Legacy UI) allows unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. CVSS 9.1.
Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the portal, potentially impacting other products.
Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify it. The attack may affect other products (scope change).