23572 matches found
CVE-2026-71031
...
CVE-2026-71031
Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...
CVE-2026-71032
...
CVE-2026-71029
Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...
CVE-2026-71017
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...
CVE-2026-71011
CVE-2026-71011 affects the Experience Manager component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a...
CVE-2026-71010
...
CVE-2026-71010
Oracle Commerce version 11.4.0's Experience Manager component is vulnerable to a HIGH-severity (CVSS 7.8) local exploit requiring infrastructure access and human interaction, enabling unauthenticated attackers to compromise the application with full CIA impact. Oracle has released patches in its ...
CVE-2026-70999
...
CVE-2026-70995
...
CVE-2026-70993
...
CVE-2026-70985
Oracle Commerce 11.4.0 Content Acquisition System allows unauthenticated, network-based HTTP attacks causing high confidentiality impact (CVSS 7.5). Oracle's August 2026 CPU advisory addresses it; no exploit or root-cause details are provided in the documents.
CVE-2026-70981
...
CVE-2026-70981
Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.
CVE-2026-70976
CVE-2026-70976 affects the Content Acquisition System component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve una...
CVE-2026-70970
...
CVE-2026-70970
CVE-2026-70970 affects the Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0). An unauthenticated attacker with network HTTP access can compromise the application; CVSS 9.8 (critical) reflects full confidentiality, integrity, and availability impact. Oracle's ...
CVE-2026-70963
Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...
CVE-2026-70965
...
CVE-2026-70964
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has a HIGH-severity (CVSS 8.2) vulnerability in the Installation and Configuration component, allowing a low-privileged network attacker to compromise the system with unauthorized data access, creation, deletion, or modification acro...