Oracle Commerce Guided Search Unauthorized Access

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

Oracle Commerce Guided Search Data Read

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search search engine and the Oracle Commerce Experience Manager user environment management tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor t...

Oracle Commerce Guided Search Tools and Frameworks Data Access Modification

The vulnerability of the Tools and Frameworks component of the Oracle Commerce Guided Search system, as well as the Oracle Commerce Experience Manager user environment management tool, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to ga...

PT-2022-3120

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search version 11.3.2 Description The issue is related to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search. This allows an unauthenticated attacker with network access...

CVE-2022-21466: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Searc...

Oracle Commerce Guided Search/Oracle Commerce Experience Manager has an unspecified vulnerability

Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...

Oracle Commerce Guided Search/Oracle Commerce Experience Manager has an unspecified vulnerability (CNVD-2021-56438)

Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...

Oracle Commerce Guided Search/Oracle Commerce Experience Manager has an unspecified vulnerability (CNVD-2021-56439)

Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...

PT-2021-7189

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.3.1.5 Description The issue exists due to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce...

PT-2021-7188

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.3.1.5 Description The issue is related to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce...

CVE-2021-2346: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2348: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2021-7176

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.3.1.5 Description The issue is related to insufficient input validation in the Tools and Frameworks component of Oracle Commerce Guided Search and Oracle Commerce...

CVE-2021-2345: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle Endeca Tools and Frameworks Script.action Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Tools and Frameworks. Authentication is required to exploit this vulnerability, but authentication is easily bypassed. This product installs a web application called Oracle Endeca...