cbcvebase.

Oracle Commerce Experience Manager vulnerabilities

81 known vulnerabilities affecting oracle/commerce_experience_manager.

Total CVEs
81
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL18HIGH41MEDIUM22

Vulnerabilities

Page 4 of 5
CVE-2026-71001P3MEDIUMCVSS 6.5v11.4.02026-08-18
CVE-2026-71001 [MEDIUM] CWE-284 CVE-2026-71001: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerc
nvd
CVE-2026-71017P3MEDIUMCVSS 6.5v11.4.02026-08-18
CVE-2026-71017 [MEDIUM] CWE-284 CVE-2026-71017: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search /
nvd
CVE-2026-61162P3HIGHCVSS 7.1v11.4.02026-07-21
CVE-2026-61162 [HIGH] CWE-284 CVE-2026-61162: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Co
nvd
CVE-2026-71008P3MEDIUMCVSS 6.8v11.4.02026-08-18
CVE-2026-71008 [MEDIUM] CWE-284 CVE-2026-71008: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-71007P3MEDIUMCVSS 6.8v11.4.02026-08-18
CVE-2026-71007 [MEDIUM] CWE-284 CVE-2026-71007: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-70992P3HIGHCVSS 7.0v11.4.02026-08-18
CVE-2026-70992 [HIGH] CWE-284 CVE-2026-70992: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Com
nvd
CVE-2026-61152P4MEDIUMCVSS 5.4v11.4.02026-07-21
CVE-2026-61152 [MEDIUM] CWE-284 CVE-2026-61152: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerc
nvd
CVE-2026-70989P4MEDIUMCVSS 6.5v11.4.02026-08-18
CVE-2026-70989 [MEDIUM] CWE-284 CVE-2026-70989: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Com
nvd
CVE-2026-71019P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71019 [MEDIUM] CWE-284 CVE-2026-71019: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Comme
nvd
CVE-2026-71006P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71006 [MEDIUM] CWE-284 CVE-2026-71006: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-71011P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71011 [MEDIUM] CWE-284 CVE-2026-71011: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-71031P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71031 [MEDIUM] CWE-284 CVE-2026-71031: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Or
nvd
CVE-2026-71025P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71025 [MEDIUM] CWE-284 CVE-2026-71025: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Or
nvd
CVE-2026-71005P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71005 [MEDIUM] CWE-284 CVE-2026-71005: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-71004P4MEDIUMCVSS 6.1v11.4.02026-08-18
CVE-2026-71004 [MEDIUM] CWE-284 CVE-2026-71004: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer
nvd
CVE-2026-70991P4MEDIUMCVSS 6.3v11.4.02026-08-18
CVE-2026-70991 [MEDIUM] CWE-284 CVE-2026-70991: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Co
nvd
CVE-2026-71033P4MEDIUMCVSS 5.5v11.4.02026-08-18
CVE-2026-71033 [MEDIUM] CWE-284 CVE-2026-71033: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle
nvd
CVE-2021-2345P4MEDIUMCVSS 5.4v11.3.1.52021-07-21
CVE-2021-2345 [MEDIUM] CVE-2021-2345: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Expe
nvd
CVE-2021-2346P4MEDIUMCVSS 5.4v11.3.1.52021-07-21
CVE-2021-2346 [MEDIUM] CVE-2021-2346: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Expe
nvd
CVE-2026-61147P4MEDIUMCVSS 6.2v11.4.02026-07-21
CVE-2026-61147 [MEDIUM] CWE-400 CVE-2026-61147: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Co
nvd
← Previous4 / 5Next →
Oracle Commerce Experience Manager vulnerabilities | cvebase