Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

127 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•7 views

CVE-2026-71017: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

6.5CVSS5.8AI score0.00342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•25 views

PT-2026-78012

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with network access via HTTP to compromise the system. The...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•22 views

PT-2026-78017

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-71026: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•7 views

CVE-2026-71014: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•18 views

PT-2026-77985

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.5AI score0.00494EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•15 views

PT-2026-77987

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

8.6CVSS5.4AI score0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•21 views

PT-2026-78014

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system. This...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/08/18 12:00 a.m.•36 views

PT-2026-78006

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with network access via HTTP to compromise the system...

9.1CVSS5.4AI score0.00425EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-70995: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-70994: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.1CVSS5.8AI score0.00494EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-71033: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

5.5CVSS5.8AI score0.00154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•3 views

CVE-2026-71032: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

7.2CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-71030: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

7.2CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•10 views

CVE-2026-71020: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-71028: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

7.8CVSS5.8AI score0.00161EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•7 views

CVE-2026-71027: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-70996: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

8.6CVSS5.8AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•9 views

CVE-2026-71015: Missing Authentication for Critical Function

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-71025: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

6.1CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Rows per page
Query Builder