Vulnerabilities in Oracle Commerce Platform

🗓️ 19 Aug 2026 09:39:57Reported by NCSCType

Oracle Commerce Platform 11.4.0 has unauthenticated remote flaws allowing DoS, privilege escalation, and full system compromise.

Reporter	Title	Published	Views	Family All 779
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple vulnerabilities in the IBM Semeru Runtime	27 Feb 202515:56	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.	28 Apr 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities	11 Jul 202407:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy vulnerable to multiple issues	31 Jan 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Xerces2	8 May 202406:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime	11 Dec 202410:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Xerces2 Java XML Parser affect IBM Application Performance Management products	13 Sep 202307:54	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL	15 Apr 202503:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to denial of service due to Apache Xerces2 Java (CVE-2012-0881, CVE-2022-23437 )	11 Apr 202413:27	–	ibm

Source	Link
oracle	www.oracle.com/security-alerts/cspuaug2026.html

19 Aug 2026 09:39Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.5 - 9.8

CVSS 27.1

EPSS0.05842

SSVC