Oracle Commerce Experience Manager vulnerabilities
81 known vulnerabilities affecting oracle/commerce_experience_manager.
Total CVEs
81
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL18HIGH41MEDIUM22
Vulnerabilities
Page 1 of 5
CVE-2026-70995P2CRITICALCVSS 9.8v11.4.02026-08-18
CVE-2026-70995 [CRITICAL] CWE-284 CVE-2026-70995: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-61145P2CRITICALCVSS 9.8v11.4.02026-07-21
CVE-2026-61145 [CRITICAL] CWE-284 CVE-2026-61145: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-61161P2CRITICALCVSS 9.8v11.4.02026-07-21
CVE-2026-61161 [CRITICAL] CWE-284 CVE-2026-61161: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-61146P2CRITICALCVSS 9.9v11.4.02026-07-21
CVE-2026-61146 [CRITICAL] CWE-269 CVE-2026-61146: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2026-71014P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-71014 [CRITICAL] CWE-284 CVE-2026-71014: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-71015P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-71015 [CRITICAL] CWE-306 CVE-2026-71015: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-71026P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-71026 [CRITICAL] CWE-284 CVE-2026-71026: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-70978P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70978 [CRITICAL] CWE-284 CVE-2026-70978: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-61153P2CRITICALCVSS 9.1v11.4.02026-07-21
CVE-2026-61153 [CRITICAL] CWE-284 CVE-2026-61153: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Comm
nvd
CVE-2026-70998P2CRITICALCVSS 9.3v11.4.02026-08-18
CVE-2026-70998 [CRITICAL] CWE-284 CVE-2026-70998: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-70980P2CRITICALCVSS 9.0v11.4.02026-08-18
CVE-2026-70980 [CRITICAL] CWE-284 CVE-2026-70980: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / O
nvd
CVE-2026-70994P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70994 [CRITICAL] CWE-284 CVE-2026-70994: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-70997P3CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70997 [CRITICAL] CWE-284 CVE-2026-70997: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Comm
nvd
CVE-2026-70979P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70979 [CRITICAL] CWE-306 CVE-2026-70979: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70977P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70977 [CRITICAL] CWE-306 CVE-2026-70977: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70984P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70984 [CRITICAL] CWE-284 CVE-2026-70984: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70981P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70981 [CRITICAL] CWE-284 CVE-2026-70981: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70976P2CRITICALCVSS 9.1v11.4.02026-08-18
CVE-2026-70976 [CRITICAL] CWE-284 CVE-2026-70976: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-61148P3HIGHCVSS 8.8v11.4.02026-07-21
CVE-2026-61148 [HIGH] CWE-284 CVE-2026-61148: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce
nvd
CVE-2026-61149P3HIGHCVSS 8.8v11.4.02026-07-21
CVE-2026-61149 [HIGH] CWE-269 CVE-2026-61149: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce
nvd
1 / 5Next →