CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle HRMS (US) product of Oracle E-Business Suite, component US Payroll - General. Affects versions 12.2.7-12.2.15. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in Oracle Production Scheduling (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to perform unauthorized creation, deletion, or modification of critical data, partial read access, and partial denial of service. CVSS 7.6.
Oracle Demantra Demand Management (part of Oracle Supply Chain) versions 12.2.3-12.2.15 have an easily exploitable vulnerability allowing a low-privileged attacker with network access via SQL to take over the product. CVSS 8.8.
Vulnerability in Oracle Advanced Planning Command Center (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
A vulnerability in Oracle Process Manufacturing Regulatory Management (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it. CVSS 8.1.
Vulnerability in Oracle Process Manufacturing Regulatory Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data, as well as unauthorized update, insert, or delete access to some data. The attack may impact additional products (scope change).
Vulnerability in Oracle Time and Labor product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow Manufacturing. Successful attacks of this vulnerability can result in takeover of Oracle Flow Manufacturing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Flow Manufacturing product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.13-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Yard Management in Oracle E-Business Suite (Internal Operations component) versions 12.2.6-12.2.15. Low privileged attacker with network access via HTTP can compromise the system, leading to takeover. CVSS 8.8.
Oracle Process Manufacturing Process Execution (part of Oracle E-Business Suite) version 12.2.15 has a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to take over the component.
Vulnerability in Oracle Time and Labor product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Oracle Purchasing (part of Oracle E-Business Suite) versions 12.2.11-12.2.15 have a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to take over the component.
Vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Vulnerability in Oracle Public Sector Payroll (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.
Vulnerability in Oracle Installed Base (component: Create Item Instance) in Oracle E-Business Suite. A low-privileged attacker via HTTP can compromise data confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Human Resources (part of Oracle E-Business Suite, component: Enterprise Command Center). A low-privileged attacker with local access can gain unauthorized access to critical data and modify it. CVSS 7.1.
Vulnerability in Oracle Human Resources (Oracle E-Business Suite) component Enterprise Command Center. Versions 12.2.14-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
In Oracle Human Resources in Oracle E-Business Suite (Data Removal Tool component) versions 12.2.3-12.2.15, a vulnerability exists. An authenticated attacker with high privileges can remotely take over Oracle Human Resources via HTTP.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS