Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

82 records in Commerce Experience Manager · all components

TI-2026-49688 CVE-2026-70995 · GHSA-2pxr-4r8r-m4fp

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 49

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284

TI-2026-43805 CVE-2026-61161 · GHSA-98xh-6375-3c4m

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 49

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-43789 CVE-2026-61145 · GHSA-fw4w-m9j8-c5pv

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 49

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-49719 CVE-2026-71026 · GHSA-95wc-2ffc-5xm6

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 48

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-49708 CVE-2026-71015 · GHSA-8339-6fc9-29mj

Missing authentication in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 48

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-306

TI-2026-49707 CVE-2026-71014 · GHSA-hw4r-p47j-5pcv

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 48

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-49671 CVE-2026-70978 · GHSA-j2fj-vjfm-j62g

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 48

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-43797 CVE-2026-61153 · GHSA-qmfm-4hm3-fmx7

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 48

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-284

TI-2021-03489 CVE-2021-20190 · GHSA-5949-rw7g-wx7w

Deserialization of untrusted data in jackson-databind

MEDIUM 48

A flaw was found in jackson-databind before 2.9.10.7.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.07573 Published 2021-01-19 Partial fix · 2.9.10.7, 2.6.7.5 CWE-502

TI-2026-49691 CVE-2026-70998 · GHSA-h2wp-f57j-hq8v

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284

TI-2026-49690 CVE-2026-70997 · GHSA-9w68-rcjg-8gmc

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-08-18 No fix listed CWE-284

TI-2026-49687 CVE-2026-70994 · GHSA-388c-mf4q-vqj7

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-08-18 No fix listed CWE-284

TI-2026-49677 CVE-2026-70984 · GHSA-7rpv-hwx3-vfmr

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-284

TI-2026-49674 CVE-2026-70981 · GHSA-4vqv-h58f-44g3

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-284

TI-2026-49672 CVE-2026-70979 · GHSA-5327-585q-6xwc

Missing authentication in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-306

TI-2026-49670 CVE-2026-70977 · GHSA-g2pv-v4f8-vj9p

Missing authentication in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-306

TI-2026-49669 CVE-2026-70976 · GHSA-729q-3728-w978

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 46

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2026-08-18 No fix listed CWE-284

TI-2020-02307 CVE-2020-2604 · GHSA-c9rv-f9qq-jjvf

Deserialization of untrusted data in Oracle Java

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04881 Published 2020-01-15 Fixed CWE-502

TI-2026-49689 CVE-2026-70996 · GHSA-h4xf-gwm9-2x9v

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 43

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-08-18 No fix listed CWE-284

TI-2026-43790 CVE-2026-61146 · GHSA-v32f-pfmh-2v52

Improper privilege management in Oracle Commerce Guided Search / Oracle Commerce…

MEDIUM 43

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

TI-2026-49717 CVE-2026-71024 · GHSA-j4gj-66x6-crwm

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 42

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00443 Published 2026-08-18 No fix listed CWE-284

TI-2026-49686 CVE-2026-70993 · GHSA-xhp3-f3vr-22fc

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 42

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00379 Published 2026-08-18 No fix listed CWE-284

TI-2026-49673 CVE-2026-70980 · GHSA-vgv4-8vmw-668f

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 41

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System).

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-284

TI-2026-49693 CVE-2026-71000 · GHSA-wjg5-69mw-xc8g

Improper access control in Oracle Commerce Guided Search / Oracle Commerce Experience…

MEDIUM 40

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00326 Published 2026-08-18 No fix listed CWE-284

TI-2026-43793 CVE-2026-61149 · GHSA-rqfx-65fr-r7j3

Improper privilege management in Oracle Commerce Guided Search / Oracle Commerce…

MEDIUM 40

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2