Commerce Guided Search (Oracle) - vulnerabilities (CVEs)

132 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2026-08-18. Vendor: Oracle.

CVEs of Commerce Guided Search

CVE-2026-71038 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71037 - CVSS 9.3 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71036 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71035 - CVSS 8.1 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version…
CVE-2026-71034 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version…
CVE-2026-71030 - CVSS 7.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71033 - CVSS 5.5 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71032 - CVSS 7.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71031 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71028 - CVSS 7.8 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71027 - CVSS 7.6 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71026 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71025 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71024 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version…
CVE-2026-71023 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71022 - CVSS 7.6 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported…
CVE-2026-71021 - CVSS 7.6 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71020 - CVSS 7.6 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71019 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations). The…
CVE-2026-71018 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71016 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71017 - CVSS 6.5 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71015 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71014 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71012 - CVSS 7.1 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71011 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71009 - CVSS 7.4 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71008 - CVSS 6.8 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71010 - CVSS 7.8 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71006 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71005 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71007 - CVSS 6.8 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71002 - CVSS 8.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71001 - CVSS 6.5 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71004 - CVSS 6.1 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-71003 - CVSS 7.1 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-70999 - CVSS 8.1 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-70998 - CVSS 9.3 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-71000 - CVSS 8.7 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-70996 - CVSS 8.6 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-70995 - CVSS 9.8 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-70997 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-70993 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70992 - CVSS 7 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70994 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-70990 - CVSS 6.8 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70989 - CVSS 6.5 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70991 - CVSS 6.3 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70986 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70988 - CVSS 7.7 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70987 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70983 - CVSS 6.8 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70985 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70984 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70980 - CVSS 9 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70982 - CVSS 6.8 (medium), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70981 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70977 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70979 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70978 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-70976 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-61163 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version…
CVE-2026-61164 - CVSS 7.4 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-61162 - CVSS 7.1 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-61161 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).…
CVE-2026-61159 - CVSS 7.5 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61158 - CVSS 7.5 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61160 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61157 - CVSS 7.5 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61153 - CVSS 9.1 (critical), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61152 - CVSS 5.4 (medium), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61150 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61149 - CVSS 8.8 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61151 - CVSS 7.1 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61147 - CVSS 6.2 (medium), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-61146 - CVSS 9.9 (critical), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2026-61148 - CVSS 8.8 (high), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The…
CVE-2026-61145 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).…
CVE-2023-22029 - CVSS 6.1 (medium), 2023-10-17: Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.3.2. Easily…
CVE-2022-21466 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is…
CVE-2022-22946 - CVSS 5.5 (medium), 2022-03-04: In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be…
CVE-2022-22947 - CVSS 10 (critical), 2022-03-03: In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is…
CVE-2021-43859 - CVSS 7.5 (high), 2022-02-01: XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU…
CVE-2021-41165 - CVSS 8.2 (high), 2021-11-17: CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all…
CVE-2021-41164 - CVSS 8.2 (high), 2021-11-17: CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may…
CVE-2021-37137 - CVSS 7.5 (high), 2021-10-19: The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved…
CVE-2021-37136 - CVSS 7.5 (high), 2021-10-19: The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used…
CVE-2021-22946 - CVSS 7.5 (high), 2021-09-29: A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command…
CVE-2021-22947 - CVSS 5.9 (medium), 2021-09-29: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and…
CVE-2021-40690 - CVSS 7.5 (high), 2021-09-19: All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not…
CVE-2021-39152 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data…
CVE-2021-39150 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data…
CVE-2021-39140 - CVSS 6.5 (medium), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100%…
CVE-2021-39154 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39151 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39141 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39146 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39149 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39145 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…
CVE-2021-39148 - CVSS 8.5 (high), 2021-08-23: XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and…