CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-15759

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 10.0.3.5, 10.2.0.5, 11.2.0.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Commerce Platform, requiring human interaction from a person other th...

SalesCloud - Critical - Unsupported - SA-CONTRIB-2017-008

This module Connects Drupal to SalesCloud's API, a Commerce Platform as a Service. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes. Versions affected All versions Drupal core is not affected. If you do not use th...

Unspecified Vulnerability in Oracle Commerce Platform

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. An unspecified vulnerability exists in Oracle Commerce Platform. An attacker could exploit the vulnerability by leveraging the 'HTTP' protocol to compromise the 'Dynamo Application Framewor...

EC-CUBE Server-Side Request Forgery Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A server-side request forgery vulnerability exists in EC-CUBE version 2.12.6en-p1, which can be exploited by remote attacke...

Unspecified Vulnerability in Oracle Retail Applications Open Commerce Platform Cloud Service Framework Component

Oracle Retail Applications is a suite of retail applications store solutions, of which the Oracle Retail Open Commerce Platform is an e-business solution component. An unspecified vulnerability exists in the Oracle Retail Applications Open Commerce Platform Cloud Service Framework component, whic...

PT-2016-4275

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform Cloud Service versions 3.5, 4.5, 4.7, and 5.0 Description The issue affects confidentiality, integrity, and availability. It is related to the Framework component, but the specific vectors are unknown...

CVE-2016-0522: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Framework...

E-commerce platform of Beijing 3D World Technology Co., Ltd. suffers from java deserialization vulnerability

Ltd. is a professional software and application service provider of domestic inspection and testing management platform, master data management platform, e-commerce platform and so on. A java deserialization vulnerability exists in the e-commerce platform of Beijing 3D World Technology Co., Ltd...

CVE-2015-4827

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

Buffer overflow

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

CVE-2015-4827

CVE-2015-4827 affects the Oracle Retail Open Commerce Platform component within Oracle Retail Applications 3.0. The vulnerability is described as allowing remote attackers to affect confidentiality and integrity via unknown vectors related to Framework. No root cause or specific exploit vectors a...

PT-2015-6717

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform version 3.0 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the Framework component. Recommendations For Oracle Retail Ope...

CVE-2015-4827: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

Researchers Outline Bugs in Yahoo, PayPal, Magento

Researchers recently discovered a smattering of vulnerabilities in web applications and mobile applications belonging to companies like Yahoo, PayPal, Magento, and Shopify that could have led to account theft, session hijacking, and phishing, among other consequences. Hadji Samir, Ebrahim Hegazy,...

Unspecified Vulnerability in Oracle Commerce Platform Commerce Guided Search/Oracle Commerce Experience Manager Component (CNVD-2015-04921)

Oracle Commerce Platform is a suite of e-business solution platforms from Oracle Corporation, USA. Oracle Commerce Guided Search/Oracle Commerce Experience Manager is one of the components that supports dynamic searching and finding of relevant and desired items for customers in a web site. Oracl...

KLA10639 Multiple vulnerabilities in Oracle products

Multiple vulnerabilities were found in Oracle Supply Chain Products Suite, Oracle Database Server, Oracle Commerce Platform and Oracle Enterprise Manager. By exploiting this vulnerability malicious users can affect confidentiality, integrity and availability. This vulnerabilities can be exploited...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System...