Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

128 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•6 views

CVE-2026-71021: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•9 views

CVE-2026-71017: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

6.5CVSS5.8AI score0.00342EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•9 views

CVE-2026-71016: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

8.2CVSS5.8AI score0.00317EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•11 views

CVE-2026-70995: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-71031: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

6.1CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•26 views

PT-2026-77989

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.3CVSS5.2AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•22 views

PT-2026-78022

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Endeca Application Controller component that allows an unauthenticated attacker with network access via HTTP to compromise the...

6.1CVSS5.8AI score0.00245EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•27 views

PT-2026-78024

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with access to the infrastructure where the software executes ...

5.5CVSS5.8AI score0.00154EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•21 views

PT-2026-77985

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.5AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•26 views

PT-2026-78017

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•29 views

PT-2026-78012

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with network access via HTTP to compromise the system. The...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•26 views

PT-2026-78008

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

6.5CVSS5.6AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•25 views

PT-2026-78023

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

7.2CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•9 views

CVE-2026-71014: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•38 views

PT-2026-78006

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.4AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•34 views

PT-2026-78011

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low privileged attacker with network access via HTTP to compromise the system. The...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•30 views

PT-2026-78005

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.4AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•26 views

PT-2026-78016

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Endeca Application Controller component that allows an unauthenticated attacker with network access via HTTP to compromise the...

6.1CVSS5.8AI score0.00245EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•31 views

PT-2026-78019

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with access to the infrastructure where the software executes ...

7.8CVSS5.8AI score0.00161EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•10 views

CVE-2026-70998: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.3CVSS5.8AI score0.00353EPSS
SaveExploits0References3
Rows per page
Query Builder