261718 matches found
CVE-2026-61152
...
CVE-2026-61151
CVE-2026-61151 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. A low-privilege, network-access attacker (HTTP) can compromise the product, leading to unauthorized access to data and possibly unauthorized upda...
CVE-2026-61149
...
CVE-2026-61149
...
CVE-2026-61150
Oracle Commerce Vulnerability CVE-2026-61150 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component (Experience Manager) in version 11.4.0. The issue allows a low-privileged, network-accessible attacker (HTTP) to compromise data, enabling unauthorized creation, d...
CVE-2026-61148
Summary: CVE-2026-61148 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege user over HTTP with network access and can lead to takeover of the Guided Search/Exp...
CVE-2026-61147
...
CVE-2026-61146
...
CVE-2026-61144
...
CVE-2026-61144
The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...
CVE-2026-61144
...
CVE-2026-61140
The CVE-2026-61140 entry affects Oracle WebCenter Sites (WebCenter Sites component) in Oracle Fusion Middleware, specifically version 14.1.2.0.0. The vulnerability is exploitable without authentication over HTTP and can lead to takeover of Oracle WebCenter Sites, with a CVSS v3.1 score of 9.8 (Ne...
CVE-2026-61137
...
CVE-2026-61138
CVE-2026-61138 affects Oracle E-Business Suite CMRO (Internal Operations) with affected versions 12.2.3–12.2.15. A network-accessible, unauthenticated vulnerability allows compromise via HTTP, potentially leading to unauthorized data access and updates (CVSSv3.1 base 7.5). No exploitation details...
CVE-2026-61138
...
CVE-2026-61136
Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...
CVE-2026-61138
...
CVE-2026-61137
CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...
CVE-2026-61132
Oracle Commerce Platform (Dynamo Application Framework) vulnerability CVE-2026-61132 affects version 11.4.0. A low privileged attacker can exploit over HTTP with network access, and user interaction is required, to potentially gain unauthorized access to critical data and perform unauthorized upd...