CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.
Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS (UK).
Vulnerability in Oracle Work in Process (component: Internal Operations) in Oracle E-Business Suite. A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in Oracle Trade Management (Oracle E-Business Suite) component Claim LOV. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Trade Management.
Vulnerability in Oracle Order Management (Oracle E-Business Suite) component Product Diagnostic Tools. Versions 12.2.4-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
In Oracle Contracts Integration (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, an easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP, requiring human interaction. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.
Vulnerability in Oracle Contracts Integration (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Lease and Finance Management (part of Oracle E-Business Suite) versions 12.2.11-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the component. CVSS 7.5.
In Oracle Lease and Finance Management in Oracle E-Business Suite (Internal Operations component) versions 12.2.14-12.2.15, a vulnerability exists. An authenticated attacker with high privileges can remotely take over Oracle Lease and Finance Management via HTTP.
Vulnerability in Oracle Product Workbench (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
A vulnerability in Oracle Price Protection (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read access to some data and modify critical data. CVSS 7.1.
Vulnerability in Oracle Product Workbench (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Price Protection (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Bills of Material (Oracle E-Business Suite) component Internal Operations. Versions 12.2.13-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle Advanced Benefits (part of Oracle E-Business Suite) version 12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite (component: Internal Operations). Affects version 12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Benefits, potentially impacting additional products (scope change). Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. CVSS 7.7 (Integrity impacts).
Vulnerability in TeleSales (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise TeleSales.
Vulnerability in Oracle Payables (Oracle E-Business Suite) component Internal Operations. Versions 12.2.8-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Payables.
Vulnerability in Oracle EDI Gateway (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
Vulnerability in Oracle Product Hub (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the component, with impact on other products (scope change). CVSS 8.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS