Oracle Commerce Guided Search / Oracle Commerce Experience Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle_corporation:oracle_commerce_guided_search_/_oracle_commerce_experience_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oracle Corporation (5277d41a-eb16-5c58-a20b-58d92ce4ed28) |
|---|---|
| Product | Oracle Commerce Guided Search / Oracle Commerce Experience Manager (9b2b24e0-6d42-5134-a93e-dd145435b66d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-61164 |
vulnerable | 2026-07-29 01:06:18.484593 |
Details available
HIGH (7.4)
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Published: 2026-07-21T21:38:32.642Z
Updated: 2026-07-23T18:20:51.012Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61163 |
vulnerable | 2026-07-29 01:06:18.484326 |
Details available
HIGH (8.1)
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-21T21:38:32.328Z
Updated: 2026-07-23T18:26:24.289Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61162 |
vulnerable | 2026-07-29 01:06:18.483946 |
Details available
HIGH (7.1)
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Published: 2026-07-21T21:38:31.647Z
Updated: 2026-07-23T18:27:06.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61161 |
vulnerable | 2026-07-29 01:06:18.483644 |
Details available
CRITICAL (9.8)
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-21T21:38:31.278Z
Updated: 2026-07-23T18:27:56.363Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61160 |
vulnerable | 2026-07-29 01:06:18.483177 |
Details available
HIGH (8.1)
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).
Published: 2026-07-21T21:38:30.944Z
Updated: 2026-07-23T18:29:55.576Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61159 |
vulnerable | 2026-07-29 01:06:18.479995 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61158 |
vulnerable | 2026-07-29 01:06:18.479614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61157 |
vulnerable | 2026-07-29 01:06:18.479087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61153 |
vulnerable | 2026-07-29 01:06:18.370235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61151 |
vulnerable | 2026-07-29 01:03:24.259762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61150 |
vulnerable | 2026-07-29 01:03:24.259452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61149 |
vulnerable | 2026-07-29 01:03:24.259140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61148 |
vulnerable | 2026-07-29 01:03:24.258942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61147 |
vulnerable | 2026-07-29 01:03:24.258653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61146 |
vulnerable | 2026-07-29 01:03:24.258356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61145 |
vulnerable | 2026-07-29 01:03:24.256275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.