Commerce

CVEs (95)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-5491	Oracle Corporation Commerce Service Center	Hig	0.53	8.2	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5482	Oracle Corporation Commerce Guided Search	Hig	0.53	8.2	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2026-83247	Oracle Corporation Commerce Guided Search	Hig	0.51	7.8	0.00	Sep 15, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the…
CVE-2026-70988	Oracle Corporation Commerce	Hig	0.50	7.7	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-83257	Oracle Corporation Commerce	Hig	0.49	7.5	0.00	Sep 15, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via…
CVE-2026-83235	Oracle Corporation Commerce	Hig	0.49	7.5	0.00	Sep 15, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71038	Oracle Corporation Commerce	Hig	0.49	7.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71027	Oracle Corporation Commerce	Hig	0.49	7.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-71022	Oracle Corporation Commerce	Hig	0.49	7.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-71021	Oracle Corporation Commerce	Hig	0.49	7.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-71020	Oracle Corporation Commerce Guided Search	Hig	0.49	7.6	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-70986	Oracle Corporation Commerce	Hig	0.49	7.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70955	Oracle Corporation Commerce Platform	Hig	0.49	7.5	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication…
CVE-2026-61133	Oracle Corporation Commerce Platform	Hig	0.49	7.5	0.00	Jul 21, 2026	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise…
CVE-2022-21466	Oracle Corporation Commerce Guided Search	Hig	0.49	7.5	0.02	Apr 19, 2022	Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-3572	Oracle Corporation Commerce	Hig	0.49	7.5	0.02	Apr 24, 2017	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce (subcomponent: MDEX). Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows…
CVE-2026-71009	Oracle Corporation Commerce	Hig	0.48	7.4	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-14536	Oracle Corporation Commerce Guided Search	Hig	0.48	7.4	0.02	Jul 15, 2020	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-14535	Oracle Corporation Commerce Service Center	Hig	0.48	7.4	0.02	Jul 15, 2020	Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2026-71032	Oracle Corporation Commerce	Hig	0.47	7.2	0.00	Aug 18, 2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…

CVE-2016-5491HigOct 25, 2016
Oracle Corporation
Commerce Service Center
risk 0.53cvss 8.2epss 0.01
Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5482HigOct 25, 2016
Oracle Corporation
Commerce Guided Search
risk 0.53cvss 8.2epss 0.01
Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2026-83247HigSep 15, 2026
Oracle Corporation
Commerce Guided Search
risk 0.51cvss 7.8epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the…
CVE-2026-70988HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.50cvss 7.7epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-83257HigSep 15, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via…
CVE-2026-83235HigSep 15, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71038HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2026-71027HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.6epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-71022HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.6epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2026-71021HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.6epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-71020HigAug 18, 2026
Oracle Corporation
Commerce Guided Search
risk 0.49cvss 7.6epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2026-70986HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2026-70955HigAug 18, 2026
Oracle Corporation
Commerce Platform
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication…
CVE-2026-61133HigJul 21, 2026
Oracle Corporation
Commerce Platform
risk 0.49cvss 7.5epss 0.00
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise…
CVE-2022-21466HigApr 19, 2022
Oracle Corporation
Commerce Guided Search
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-3572HigApr 24, 2017
Oracle Corporation
Commerce
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce (subcomponent: MDEX). Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows…
CVE-2026-71009HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.48cvss 7.4epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2020-14536HigJul 15, 2020
Oracle Corporation
Commerce Guided Search
risk 0.48cvss 7.4epss 0.02
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated…
CVE-2020-14535HigJul 15, 2020
Oracle Corporation
Commerce Service Center
risk 0.48cvss 7.4epss 0.02
Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access…
CVE-2026-71032HigAug 18, 2026
Oracle Corporation
Commerce
risk 0.47cvss 7.2epss 0.00
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker…

Page 2 of 5