Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Advisory: Oracle Commerce Platform — oracle.com/security-alerts/cpujul2026.html Clear all filters
TI-2026-43781 CVE-2026-61137 · GHSA-hph8-qr89-f778

Improper authentication in Oracle Commerce Platform

Priority LOW 37

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-287
TI-2026-43780 CVE-2026-61136 · GHSA-q3qp-4hq5-mr52

Improper access control in Oracle Commerce Platform

Priority LOW 38

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00307 Published 2026-07-21 No fix listed CWE-284
TI-2026-43779 CVE-2026-61135 · GHSA-49rr-39cq-x5ph

Improper access control in Oracle Commerce Platform

Priority LOW 34

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.0034 Published 2026-07-21 No fix listed CWE-284
TI-2026-43778 CVE-2026-61134 · GHSA-cjjj-jp55-4rff

Improper access control in Oracle Commerce Platform

Priority LOW 32

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00289 Published 2026-07-21 No fix listed CWE-284
TI-2026-43777 CVE-2026-61133 · GHSA-vrp3-w3m3-9r2x

Information disclosure in Oracle Commerce Platform

Priority LOW 39

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200
TI-2026-43776 CVE-2026-61132 · GHSA-g453-8pp2-93m3

Cross-site request forgery in Oracle Commerce Platform

Priority LOW 32

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00154 Published 2026-07-21 No fix listed CWE-352
TI-2026-43775 CVE-2026-61131 · GHSA-vqg7-q7mc-xx67

Improper access control in Oracle Commerce Platform

Priority MEDIUM 49

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284
TI-2026-43774 CVE-2026-61130 · GHSA-6vm2-wvf9-24gh

Improper access control in Oracle Commerce Platform

Priority MEDIUM 46

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-07-21 No fix listed CWE-284
TI-2026-43773 CVE-2026-61129 · GHSA-c35r-wmmq-534h

Improper authentication in Oracle Commerce Platform

Priority MEDIUM 49

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287