CVE-2015-2653

4 documents4 sources

Severity

6.4MEDIUM

EPSS

0.3%

top 45.68%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Commerce Platform

Timeline

PublishedJul 16

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

▶NVDoracle/commerce_platform4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-7hj4-83j2-59hw: Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3↗2022-05-17

▶

CVEList

CVE-2015-2653: Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3↗2015-07-16

▶