Lucene search
+L

140 matches found

NVD
NVD
added 2023/10/17 10:15 p.m.36 views

CVE-2023-22029

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Workbench. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successf...

6.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/17 9:02 p.m.54 views

CVE-2023-22029

Oracle Commerce Guided Search (Workbench) vulnerability tracked as CVE-2023-22029 affects version 11.3.2. The issue stems from insufficient input validation in the Workbench component, allowing an unauthenticated attacker with network access over HTTP to compromise the product. Attacks require us...

6.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/17 12:00 a.m.7 views

Oracle Commerce Security Vulnerability

Oracle Commerce is a suite of e-business solutions from Oracle Corporation. A security vulnerability exists in Oracle Commerce's Oracle Commerce Guided Search version 11.3.2, which originated from a vulnerability that could allow an unauthenticated attacker to compromise Oracle Commerce Guided...

6.1CVSS6.7AI score0.00327EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:00 a.m.21 views

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

7.8CVSS7.2AI score0.01785EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.13 views

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search search engine and the Oracle Commerce Experience Manager user environment management tool allows a perpetrator to gain access to data for reading purposes.

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search search engine and the Oracle Commerce Experience Manager user environment management tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor t...

4.3CVSS6.4AI score0.0086EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.10 views

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search search engine and the Oracle Commerce Experience Manager user environment management tool allows a perpetrator to gain access to and modify data.

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search system, as well as the Oracle Commerce Experience Manager user environment management tool, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to ga...

5.4CVSS6.6AI score0.00511EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2022/04/19 9:15 p.m.12 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS7.3AI score0.01785EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/19 9:15 p.m.17 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS7.1AI score0.01785EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/04/19 9:15 p.m.31 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS0.01785EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/19 9:15 p.m.26 views

Design/Logic Flaw

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

5CVSS7.4AI score0.01785EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/19 8:38 p.m.13 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS6.7AI score0.01785EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/19 8:38 p.m.32 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS7.6AI score0.01785EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/19 8:38 p.m.109 views

CVE-2022-21466

CVE-2022-21466 affects Oracle Commerce Guided Search (Tools and Frameworks) in Oracle Commerce 11.3.2. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to access or compromise Oracle Commerce Guided Search, with Confidentiality impact described as High and other i...

7.5CVSS7.5AI score0.01785EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/19 12:00 a.m.10 views

Oracle Commerce 输入验证错误漏洞

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Oracle Commerce's Oracle Commerce Guided Search suffers from an input validation error vulnerability that could allow an unauthenticated attacker to compromise Oracle Commerce Guided Search via web access ov...

7.5CVSS8AI score0.01785EPSS
SaveExploits0References5
NVD
NVD
added 2021/07/21 3:15 p.m.23 views

CVE-2021-2348

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.3CVSS0.0086EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.8 views

CVE-2021-2348

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.3CVSS6.6AI score0.0086EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.9 views

CVE-2021-2345

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS7.3AI score0.00651EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.9 views

CVE-2021-2346

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS6.7AI score0.00511EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/21 3:15 p.m.20 views

CVE-2021-2346

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS0.00511EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/21 3:15 p.m.19 views

CVE-2021-2345

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS0.00651EPSS
SaveExploits0References1
Rows per page
Query Builder