Oracle Commerce Experience Manager vulnerabilities
81 known vulnerabilities affecting oracle/commerce_experience_manager.
Total CVEs
81
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL18HIGH41MEDIUM22
Vulnerabilities
Page 3 of 5
CVE-2026-70993P3HIGHCVSS 8.2v11.4.02026-08-18
CVE-2026-70993 [HIGH] CWE-284 CVE-2026-70993: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle
nvd
CVE-2026-70988P3HIGHCVSS 7.7v11.4.02026-08-18
CVE-2026-70988 [HIGH] CWE-284 CVE-2026-70988: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle C
nvd
CVE-2026-71018P3HIGHCVSS 8.2v11.4.02026-08-18
CVE-2026-71018 [HIGH] CWE-284 CVE-2026-71018: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2026-71016P3HIGHCVSS 8.2v11.4.02026-08-18
CVE-2026-71016 [HIGH] CWE-284 CVE-2026-71016: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2026-71023P3HIGHCVSS 7.5v11.4.02026-08-18
CVE-2026-71023 [HIGH] CWE-284 CVE-2026-71023: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2020-14536P3HIGHCVSS 7.4≥ 11.0, < 11.3.12020-07-15
CVE-2020-14536 [HIGH] CVE-2020-14536: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / O
nvd
CVE-2026-71032P3HIGHCVSS 7.2v11.4.02026-08-18
CVE-2026-71032 [HIGH] CWE-284 CVE-2026-71032: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2026-71030P3HIGHCVSS 7.2v11.4.02026-08-18
CVE-2026-71030 [HIGH] CWE-284 CVE-2026-71030: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Orac
nvd
CVE-2026-71021P3HIGHCVSS 7.6v11.4.02026-08-18
CVE-2026-71021 [HIGH] CWE-284 CVE-2026-71021: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracl
nvd
CVE-2026-71022P3HIGHCVSS 7.6v11.4.02026-08-18
CVE-2026-71022 [HIGH] CWE-284 CVE-2026-71022: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experienc
nvd
CVE-2026-71027P3HIGHCVSS 7.6v11.4.02026-08-18
CVE-2026-71027 [HIGH] CWE-284 CVE-2026-71027: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracl
nvd
CVE-2026-71020P3HIGHCVSS 7.6v11.4.02026-08-18
CVE-2026-71020 [HIGH] CWE-284 CVE-2026-71020: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracl
nvd
CVE-2026-71028P3HIGHCVSS 7.8v11.4.02026-08-18
CVE-2026-71028 [HIGH] CWE-284 CVE-2026-71028: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Co
nvd
CVE-2026-61151P3HIGHCVSS 7.1v11.4.02026-07-21
CVE-2026-61151 [HIGH] CWE-284 CVE-2026-61151: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce
nvd
CVE-2026-71010P3HIGHCVSS 7.8v11.4.02026-08-18
CVE-2026-71010 [HIGH] CWE-284 CVE-2026-71010: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Exp
nvd
CVE-2026-71012P3HIGHCVSS 7.1v11.4.02026-08-18
CVE-2026-71012 [HIGH] CWE-284 CVE-2026-71012: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce
nvd
CVE-2026-71003P3HIGHCVSS 7.1v11.4.02026-08-18
CVE-2026-71003 [HIGH] CWE-284 CVE-2026-71003: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce
nvd
CVE-2026-70990P3MEDIUMCVSS 6.8v11.4.02026-08-18
CVE-2026-70990 [MEDIUM] CWE-200 CVE-2026-70990: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70982P3MEDIUMCVSS 6.8v11.4.02026-08-18
CVE-2026-70982 [MEDIUM] CWE-284 CVE-2026-70982: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd
CVE-2026-70983P3MEDIUMCVSS 6.8v11.4.02026-08-18
CVE-2026-70983 [MEDIUM] CWE-284 CVE-2026-70983: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Ora
nvd