CVE-2026-61161

...

CVE-2026-61161

...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61159

...

CVE-2026-61160

...

CVE-2026-61156

CVE-2026-61156 affects Oracle Commerce Guided Search Platform Services (Forge) with vulnerable version 11.4.0. An unauthenticated attacker over HTTPS can compromise the service, enabling unauthorized creation, deletion, or modification of data and potential unauthorized access to all Oracle Comme...

CVE-2026-61157

The CVE-2026-61157 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially leading to unauthorized access to con...

CVE-2026-61157

...

CVE-2026-61157

...

CVE-2026-61153

...

CVE-2026-61152

...

CVE-2026-61154

...

CVE-2026-61152

The CVE-2026-61152 entry applies to Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) for version 11.4.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized update/insert/d...

CVE-2026-61153

...

CVE-2026-61152

...

CVE-2026-61153

CVE-2026-61153 impacts Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability allows unauthenticated network access via HTTP to compromise the product, enabling unauthorized creation, deletion or modificat...

CVE-2026-61151

...

CVE-2026-61151

CVE-2026-61151 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. A low-privilege, network-access attacker (HTTP) can compromise the product, leading to unauthorized access to data and possibly unauthorized upda...

CVE-2026-61149

...

CVE-2026-61150

Oracle Commerce Vulnerability CVE-2026-61150 affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component (Experience Manager) in version 11.4.0. The issue allows a low-privileged, network-accessible attacker (HTTP) to compromise data, enabling unauthorized creation, d...