CVE-2026-61152

The CVE-2026-61152 entry applies to Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized update/insert/d...

CVE-2026-61153

...

CVE-2026-61152

...

CVE-2026-61153

CVE-2026-61153 impacts Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability allows unauthenticated network access via HTTP to compromise the product, enabling unauthorized creation, deletion or modificat...

CVE-2026-61151

...

CVE-2026-61151

CVE-2026-61151 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. A low-privilege, network-access attacker (HTTP) can compromise the product, leading to unauthorized access to data and possibly unauthorized upda...

CVE-2026-61150

Oracle Commerce Vulnerability CVE-2026-61150 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component (Experience Manager) in version 11.4.0. The issue allows a low-privileged, network-accessible attacker (HTTP) to compromise data, enabling unauthorized creation, d...

CVE-2026-61149

...

CVE-2026-61149

CVE-2026-61149 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in Oracle Commerce version 11.4.0. The description indicates an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise ...

CVE-2026-61147

...

CVE-2026-61145

...

CVE-2026-61144

The CVE-2026-61144 entry describes a vulnerability in Oracle MySQL 9.7.x (MySQL Server, Cluster) affecting the Server: Optimizer component for versions 9.7.0–9.7.1. An attacker with network access via multiple protocols and high privileges can cause a hang or repeated crashes (complete DoS) in My...

CVE-2026-61141

...

CVE-2026-61142

...

CVE-2026-61142

CVE-2026-61142 is a vulnerability in Oracle E-Business Suite Oracle Payroll (Internal Operations) affecting 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Payroll, potentially granting unauthorized access to critical data or full access to Oracle...

CVE-2026-61136

...

CVE-2026-61137

...

CVE-2026-61138

CVE-2026-61138 affects Oracle E-Business Suite CMRO (Internal Operations) with affected versions 12.2.3–12.2.15. A network-accessible, unauthenticated vulnerability allows compromise via HTTP, potentially leading to unauthorized data access and updates (CVSSv3.1 base 7.5). No exploitation details...

CVE-2026-61137

...

CVE-2026-61137

CVE-2026-61137 affects Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. An unauthenticated, network-accessible flaw over HTTP can lead to full takeover of the platform (CVSS 3.1: 8.1, C/I/A high). The connected Oracle CPU July 2026 advisory indicates patches e...