CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Product Hub (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Product Hub.
Vulnerability in Oracle Product Hub (Oracle E-Business Suite) component Internal Operations. Versions 12.2.3-12.2.15 affected. Low-privileged attacker with network access via HTTP can compromise confidentiality and integrity.
Vulnerability in Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
Vulnerability in Oracle Process Manufacturing Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in Oracle Process Manufacturing Logistics of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Customers Online (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in Oracle Process Manufacturing Product Development (Oracle E-Business Suite) component Quality Management Specs. Version 12.2.15 is affected. A low-privileged attacker with network access via HTTP can compromise this product.
Vulnerability in Oracle Process Manufacturing Systems (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity of critical data.
Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Systems. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).
Vulnerability in Oracle Document Management and Collaboration (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Vulnerability in Oracle HCM Configuration Workbench (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) component Staffing. Version 9.1 is affected. A low-privileged attacker with network access via HTTP can compromise this product.
In PeopleSoft Enterprise FIN Common Objects Argentina (part of Oracle PeopleSoft) version 9.1, an easily exploitable vulnerability allows an unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change) and result in unauthorized access to critical data and modification capabilities.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (part of Oracle PeopleSoft) version 9.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly read and modify critical data. CVSS 7.4.
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
A vulnerability in Oracle Communications Converged Application Server (RTP Proxy component) version 8.3. Difficult to exploit, requires logon to infrastructure and high privileges. Successful attack can lead to server takeover and impact other products (scope change). CVSS 7.5.
Vulnerability in Oracle Communications Converged Application Server (Core component) versions 8.2 and 8.3. Difficult to exploit, allows an unauthenticated attacker with network access via TCP/IP to take over the server.
Vulnerability in Oracle Communications Converged Application Server version 8.3. Difficult to exploit, allows a high-privileged attacker with network access via TLS to take over the server and impact additional products.
Vulnerability in Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine). A low-privileged attacker via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS