1428522 matches found
CVE-2026-71040
...
CVE-2026-71042
...
CVE-2026-71037
...
CVE-2026-71037
Oracle Commerce Experience Manager 11.4.0 has a critical (CVSS 9.3) unauthenticated, network-reachable flaw allowing an attacker to gain unauthorized read/write access to all accessible data, with scope extending to other products. Exploitation requires human interaction; no exploit or scanner co...
CVE-2026-71035
A HIGH-severity (CVSS 8.1) vulnerability affects Oracle Commerce 11.4.0's Forge component, exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, leading to full compromise of Guided Search/Experience Manager (C/I/A impact). Oracle's August 2026 CPU advisory is t...
CVE-2026-71032
Oracle Commerce 11.4.0's Endeca Application Controller has an easily exploitable, unauthenticated HTTP vulnerability allowing unauthorized read, insert, delete, and update access to data, with CVSS 7.2 (HIGH). No patch or exploit details are provided; monitor Oracle's August 2026 CPU advisory for...
CVE-2026-71028
...
CVE-2026-71025
Oracle Commerce 11.4.0 (component: Endeca Application Controller) is vulnerable to an unauthenticated, network-exploitable flaw requiring human interaction (CVSS 6.1, medium). It enables unauthorized read, update, insert, or delete access to application data; no exploit code is publicly known. Or...
CVE-2026-71024
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-71026
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-based HTTP attack (CVSS 9.1, Critical) enabling full confidentiality and integrity compromise of Commerce Guided Search and Experience Manager data. Oracle's August 2026 CPU advisory is the authori...
CVE-2026-71025
...
CVE-2026-71021
Oracle Commerce 11.4.0, component Endeca Application Controller, is vulnerable to a network-accessible, low-complexity attack requiring only low privileges and user interaction. Successful exploitation yields high confidentiality impact and low integrity impact with scope change. Oracle's August ...
CVE-2026-71019
...
CVE-2026-71017
...
CVE-2026-71014
A critical (CVSS 9.1) unauthenticated HTTP vulnerability in Oracle Commerce 11.4.0's Endeca Application Controller allows remote attackers to read, create, modify, or delete all accessible application data. No root cause or fix version is specified; monitor Oracle's August 2026 security advisory ...
EUVD-2026-61960
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
CVE-2026-71012
...
CVE-2026-71008
Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...