Lucene search
+L

766 matches found

Cvelist
Cvelist
•added 2022/04/19 8:38 p.m.•36 views

CVE-2022-21466

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS7.6AI score0.01813EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/19 8:38 p.m.•116 views

CVE-2022-21466

CVE-2022-21466 affects Oracle Commerce Guided Search (Tools and Frameworks) in Oracle Commerce 11.3.2. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to access or compromise Oracle Commerce Guided Search, with Confidentiality impact described as High and other i...

7.5CVSS7.5AI score0.01813EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/04/19 12:00 a.m.•13 views

Oracle Commerce 输入验证错误漏洞

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Oracle Commerce's Oracle Commerce Guided Search suffers from an input validation error vulnerability that could allow an unauthenticated attacker to compromise Oracle Commerce Guided Search via web access ov...

7.5CVSS8AI score0.01813EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•3 views

CVE-2022-21466: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

7.5CVSS7AI score0.01813EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•13 views

The vulnerability of the sub-component of the Dynamo Application Framework within the component of the Oracle Commerce Platform of the e-commerce platform Oracle Commerce allows a perpetrator to gain access to data.

The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform, an e-commerce platform, exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to data by using specially crafted...

5.3CVSS6.6AI score0.01147EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2022/01/21 12:00 a.m.•30 views

Oracle Commerce Input Validation Error Vulnerability

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. A security vulnerability in Oracle Commerce's Oracle Commerce Platform product could allow an unauthenticated...

5.3CVSS6AI score0.01147EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/19 12:15 p.m.•14 views

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS5.8AI score0.01147EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/19 12:15 p.m.•27 views

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS0.01147EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/19 12:15 p.m.•10 views

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS6AI score0.01147EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/01/19 12:15 p.m.•29 views

Design/Logic Flaw

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5CVSS4.7AI score0.01147EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/01/19 11:26 a.m.•97 views

CVE-2022-21387

CVE-2022-21387 : A vulnerability in Oracle Commerce Platform (Dynamo Application Framework) affects versions 11.3.0, 11.3.1, and 11.3.2. An unauthenticated, network-accessible attacker over HTTP can read a subset of data from the Oracle Commerce Platform. CVSSv3.1 base score is 5.3 (Confidentiali...

5.3CVSS4.8AI score0.01147EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/01/19 11:26 a.m.•36 views

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS5AI score0.01147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/01/19 11:26 a.m.•16 views

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS5.7AI score0.01147EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•2 views

CVE-2022-21387: Undefined Security Weakness

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS5.7AI score0.01147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/01/19 12:00 a.m.•13 views

Oracle Commerce 输入验证错误漏洞

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. A security vulnerability in Oracle Commerce's Oracle Commerce Platform product could allow an unauthenticated...

5.3CVSS5.7AI score0.01147EPSS
SaveExploits0References3
NVD
NVD
•added 2021/07/21 3:15 p.m.•27 views

CVE-2021-2348

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.3CVSS0.0086EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/21 3:15 p.m.•15 views

CVE-2021-2348

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.3CVSS6.6AI score0.0086EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/21 3:15 p.m.•11 views

CVE-2021-2345

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS7.3AI score0.00651EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/21 3:15 p.m.•15 views

CVE-2021-2346

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS6.7AI score0.00511EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/21 3:15 p.m.•23 views

CVE-2021-2346

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS0.00511EPSS
SaveExploits0References1
Rows per page
Query Builder