Commerce

CVEs (88)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-70953	Oracle Corporation Commerce	Cri	0.64	9.8	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise…
CVE-2021-2463	Oracle Corporation Commerce Platform	Cri	0.64	9.8	0.02	Jul 21, 2021	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71037	Oracle Corporation Commerce	Cri	0.60	9.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-70998	Oracle Corporation Commerce	Cri	0.60	9.3	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71015	Oracle Corporation Commerce Guided Search	Cri	0.59	9.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71014	Oracle Corporation Commerce Guided Search	Cri	0.59	9.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-70980	Oracle Corporation Commerce	Cri	0.59	9.0	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2026-70978	Oracle Corporation Commerce	Cri	0.59	9.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70977	Oracle Corporation Commerce Guided Search	Cri	0.59	9.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70976	Oracle Corporation Commerce Guided Search	Cri	0.59	9.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-71000	Oracle Corporation Commerce	Hig	0.57	8.7	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2026-70996	Oracle Corporation Commerce Guided Search	Hig	0.56	8.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71035	Oracle Corporation Commerce Guided Search / Oracle Commerce Experience Manager	Hig	0.53	8.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-71024	Oracle Corporation Commerce	Hig	0.53	8.2	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2026-71018	Oracle Corporation Commerce Guided Search	Hig	0.53	8.2	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71016	Oracle Corporation Commerce Guided Search	Hig	0.53	8.2	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-70999	Oracle Corporation Commerce	Hig	0.53	8.1	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2016-5491	Oracle Corporation Commerce Service Center	Hig	0.53	8.2	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5482	Oracle Corporation Commerce Guided Search	Hig	0.53	8.2	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2026-71010	Oracle Corporation Commerce	Hig	0.51	7.8	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to…

CVE-2026-70953CriAug 18, 2026
Oracle Corporation
Commerce
risk 0.64cvss 9.8epss 0.00
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise…
CVE-2021-2463CriJul 21, 2021
Oracle Corporation
Commerce Platform
risk 0.64cvss 9.8epss 0.02
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71037CriAug 18, 2026
Oracle Corporation
Commerce
risk 0.60cvss 9.3epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-70998CriAug 18, 2026
Oracle Corporation
Commerce
risk 0.60cvss 9.3epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71015CriAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71014CriAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-70980CriAug 18, 2026
Oracle Corporation
Commerce
risk 0.59cvss 9.0epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2026-70978CriAug 18, 2026
Oracle Corporation
Commerce
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70977CriAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70976CriAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.59cvss 9.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-71000HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2026-70996HigAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.56cvss 8.6epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71035HigAug 18, 2026
Oracle Corporation
Commerce Guided Search / Oracle Commerce Experience Manager
risk 0.53cvss 8.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-71024HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2026-71018HigAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-71016HigAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-70999HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.53cvss 8.1epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2016-5491HigOct 25, 2016
Oracle Corporation
Commerce Service Center
risk 0.53cvss 8.2epss 0.01
Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5482HigOct 25, 2016
Oracle Corporation
Commerce Guided Search
risk 0.53cvss 8.2epss 0.01
Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2026-71010HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.51cvss 7.8epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to…

Page 1 of 5