CVE-2026-61146: Improper Privilege Management

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2026-61145: Improper Access Control

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

CVE-2026-61147: Uncontrolled Resource Consumption

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

EUVD-2015-2745

Malware in sbrugna...

EUVD-2015-2699

Malware in sbrugna...

Unspecified Vulnerability in Oracle Commerce Platform Commerce Guided Search/Oracle Commerce Experience Manager Component (CNVD-2015-04921)

Oracle Commerce Platform is a suite of e-business solution platforms from Oracle Corporation, USA. Oracle Commerce Guided Search/Oracle Commerce Experience Manager is one of the components that supports dynamic searching and finding of relevant and desired items for customers in a web site. Oracl...

CVE-2015-2653

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System...

CVE-2015-2607

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System...

CVE-2015-2607

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System...

CVE-2015-2653

The CVE-2015-2653 entry applies to Oracle Commerce Guided Search / Oracle Commerce Experience Manager within Oracle Commerce Platform. Affected products include Oracle Commerce Platform versions 3.1.1, 3.1.2, 11.0, and 11.1, specifically via the Content Acquisition System (CAS) interface. The con...

CVE-2015-2653

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System...

PT-2015-5812

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 3.1.1 through 3.1.2 Oracle Commerce Platform versions 11.0 through 11.1 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the...

CVE-2015-2653: Undefined Security Weakness

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System...

PT-2015-5795

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 Description The issue affects the confidentiality of the system, allowing remote attackers to exploit it via unknown vectors related to the Content Acquisition System in the...

CVE-2015-2607: Undefined Security Weakness

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System...

SRC-2015-0003 : Oracle Endeca Tools and Frameworks AMF Request Beanshell Script Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Tools and Frameworks. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fla...