490 matches found
CVE-2019-2712
CVE-2019-2712 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 11.2.0.3 and 11.3.1. Multiple sources describe a vulnerability that allows an unauthenticated attacker, with network access over HTTP, to compromise the Oracle Commerce Platform. The exploit requi...
CVE-2019-2713
Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce subcomponent: Asset Manager. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Merchandisin...
CVE-2019-2712
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2659
CVE-2019-2659 concerns Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.2.0.3. The Red Hat/NVD descriptions indicate unauthenticated network access over HTTP and a requirement for user interaction, allowing unauthorized read and read/write actions on Oracle Commerc...
CVE-2019-2659
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...
CVE-2019-2659
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...
Oracle Commerce Platform Component Access Control Error Vulnerability
Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. An access control error vulnerability exists in the Oracle Commerce Platform component. An attacker could exploi...
Oracle Commerce Platform Component Access Control Error Vulnerability (CNVD-2019-40810)
Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. An access control error vulnerability exists in the Oracle Commerce Platform component. An attacker could exploi...
Oracle Commerce Guided Search/Oracle Commerce Experience Manager Component Denial of Service Vulnerability
Oracle Commerce is a suite of e-business solution platforms from Oracle Corporation, USA. Oracle Commerce Guided Search/Oracle Commerce Experience Manager component is one of the components that supports the ability to dynamically Oracle Commerce Guided Search/Oracle Commerce Experience Manager...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
Design/Logic Flaw
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2017-3572
CVE-2017-3572 affects Oracle Commerce Guided Search/Oracle Commerce Experience Manager (MDEX subcomponent). Affected versions: 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1, 6.5.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequent crash of the aff...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2017-3296
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-3296
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-3296
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-3296
CVE-2017-3296 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 10.0.3.5, 10.2.0.5, and 11.2.0.2. The vulnerability allows an unauthenticated attacker, with network access via HTTP, to compromise the platform and read a subset of data; exploitation requires hu...