Oracle Commerce Guided Search vulnerabilities

CVE-2026-71002 [HIGH] CWE-284 CVE-2026-71002: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-71035 [HIGH] CWE-284 CVE-2026-71035: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience

CVE-2026-61163 [HIGH] CWE-287 CVE-2026-61163: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience

CVE-2026-70999 [HIGH] CWE-284 CVE-2026-70999: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-61150 [HIGH] CWE-284 CVE-2026-61150: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2020-2604 [HIGH] CWE-502 CVE-2020-2604: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embed

CVE-2021-20190 [HIGH] CWE-502 CVE-2021-20190: A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between s A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2021-40690 [HIGH] CWE-200 CVE-2021-40690: All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.

CVE-2026-71000 [HIGH] CWE-284 CVE-2026-71000: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-71009 [HIGH] CWE-284 CVE-2026-71009: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commer

CVE-2026-71024 [HIGH] CWE-284 CVE-2026-71024: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience M

CVE-2026-61160 [HIGH] CWE-20 CVE-2026-61160: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce E

CVE-2026-61159 [HIGH] CWE-200 CVE-2026-61159: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-71034 [HIGH] CWE-284 CVE-2026-71034: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience M

CVE-2026-71038 [HIGH] CWE-284 CVE-2026-71038: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-70985 [HIGH] CWE-284 CVE-2026-70985: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle

CVE-2026-70986 [HIGH] CWE-284 CVE-2026-70986: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle

CVE-2026-70987 [HIGH] CWE-284 CVE-2026-70987: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle

CVE-2026-61158 [HIGH] CWE-284 CVE-2026-61158: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Commerce Guided Search / Oracle Commerce

CVE-2026-61157 [HIGH] CWE-284 CVE-2026-61157: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce