U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
Icon for NVD Communications and Status Updates Page
Communications Page
The NVD now supports CVSS version 4.0!
CVSS v4.0 Support
The letters N V D typed out in binary
2.0 APIs

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics.

For information on how to cite the NVD, including the database's Digital Object Identifier (DOI), please consult NIST's Public Data Repository.

Last 20 Scored Vulnerability IDs & Summaries CVSS Severity

  • CVE-2026-60866 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with networ... read CVE-2026-60866
    Published: August 18, 2026; 5:16:45 PM -0400

  • CVE-2026-60916 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60916
    Published: August 18, 2026; 5:16:47 PM -0400

  • CVE-2026-60921 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60921
    Published: August 18, 2026; 5:16:47 PM -0400

  • CVE-2026-60946 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60946
    Published: August 18, 2026; 5:16:48 PM -0400

  • CVE-2026-60947 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60947
    Published: August 18, 2026; 5:16:48 PM -0400

  • CVE-2026-60958 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60958
    Published: August 18, 2026; 5:16:49 PM -0400

  • CVE-2026-60970 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60970
    Published: August 18, 2026; 5:16:49 PM -0400

  • CVE-2026-70870 - Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). The supported version that is affected is 11.2.23.0.000. Easily exploitable vulnerability allows unauthenticated atta... read CVE-2026-70870
    Published: August 18, 2026; 5:17:43 PM -0400

  • CVE-2026-70850 - Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to... read CVE-2026-70850
    Published: August 18, 2026; 5:17:40 PM -0400

  • CVE-2026-70851 - Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network a... read CVE-2026-70851
    Published: August 18, 2026; 5:17:41 PM -0400

  • CVE-2026-70853 - Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network ... read CVE-2026-70853
    Published: August 18, 2026; 5:17:41 PM -0400

  • CVE-2026-60971 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated ... read CVE-2026-60971
    Published: August 18, 2026; 5:16:49 PM -0400

  • CVE-2026-70859 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to comp... read CVE-2026-70859
    Published: August 18, 2026; 5:17:42 PM -0400

  • CVE-2026-70857 - Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to com... read CVE-2026-70857
    Published: August 18, 2026; 5:17:41 PM -0400

  • CVE-2026-70856 - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to... read CVE-2026-70856
    Published: August 18, 2026; 5:17:41 PM -0400

  • CVE-2026-8497 - Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a... read CVE-2026-8497
    Published: July 29, 2026; 2:16:58 PM -0400

  • CVE-2026-62594 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows high privileged attacker with network access vi... read CVE-2026-62594
    Published: August 18, 2026; 5:17:11 PM -0400

  • CVE-2026-62587 - Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via H... read CVE-2026-62587
    Published: August 18, 2026; 5:17:10 PM -0400

  • CVE-2026-60860 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated atta... read CVE-2026-60860
    Published: August 18, 2026; 5:16:45 PM -0400

  • CVE-2026-60861 - Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacke... read CVE-2026-60861
    Published: August 18, 2026; 5:16:45 PM -0400

Created September 20, 2022 , Updated August 27, 2024