CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (HTTP) can take over the platform.
Vulnerability in the Messaging Enabler component of Oracle Service Delivery Platform. An unauthenticated attacker with network access via SOAP can compromise the platform, with potential impact on other products.
Vulnerability in the Messaging Enabler component of Oracle Service Delivery Platform. An unauthenticated attacker with network access via HTTP can compromise the platform.
Vulnerability in Oracle Fusion Middleware Service Delivery Platform (versions 12.2.1.4.0 and 14.1.2.0.0) allows a low-privileged attacker with network access via T3, IIOP to gain unauthorized access, modify data, and cause partial denial of service. CVSS 9.9.
Vulnerability in the Messaging Enabler component of Oracle Service Delivery Platform. An unauthenticated attacker with network access via T3, IIOP can compromise the platform.
Vulnerability in the Messaging Enabler component of Oracle Service Delivery Platform. An unauthenticated attacker with network access via T3, IIOP can compromise the platform.
Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (T3, IIOP) can take over the platform.
Vulnerability in Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Affects version 15.1.1.0.0. An unauthenticated attacker via HTTP can access and modify critical data, potentially affecting other products.
Vulnerability in Oracle WebLogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Unauthenticated attacker via network (HTTP) can modify data.
Vulnerability in Oracle HTTP Server (component: Apache Plugin). Unauthenticated attacker via network (HTTP) can take over the server.
Vulnerability in Oracle Unified Directory (OUD Core component). An unauthenticated attacker with network access via LDAP can compromise the directory.
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker to remotely take over the system via LDAP. The attack may impact additional products (scope change).
Critical vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker to remotely take over the server via network using LDAP. The attack may impact additional products (scope change).
Critical vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack may impact additional products (scope change).
Critical vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack does not impact other products (no scope change).
Vulnerability in Oracle Access Manager (Authentication Engine component) allows a low-privileged attacker to remotely take over the system via HTTP. The attack may impact additional products (scope change).
Vulnerability in Oracle Identity Manager (OIM Legacy UI component) allows an unauthenticated attacker with network access via T3/IIOP to take over the system.
Vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker with network access via HTTP to take over the system.
Vulnerability in Oracle Access Manager (component: Authentication Engine) allows unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. CVSS 9.1.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to fully compromise the system. The attack is easy to perform.