Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Oracle Commerce Guided Search / Oracle Commerce Experience Manager — Vulnerabilities & Security Advisories 105

All 105 CVE vulnerabilities found in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses for Oracle Commerce Guided Search and Oracle Commerce Experience Manager, categorized by vendor, product, and vulnerability type. The collection encompasses a comprehensive range of reported issues, including remote code execution, privilege escalation, and cross-site scripting flaws, covering the timeline from the initial release of these components through the most recent security bulletin updates. Users can leverage this resource to track official advisories issued by Oracle, analyze the prevalence and impact of specific weakness classes within the Oracle Commerce suite, or review the complete historical vulnerability record for these specific applications. The data presented here facilitates proactive risk assessment and remediation planning by providing a centralized view of security events without requiring navigation across multiple disparate sources. Security professionals and system administrators can use this information to prioritize patching efforts, validate the security posture of their deployed environments, and understand the evolution of threats targeting Oracle's e-commerce infrastructure. All entries are derived from verified public disclosures and vendor notifications to ensure accuracy and relevance for defensive operations. This aggregation serves as a critical reference for maintaining compliance with security standards and reducing the attack surface associated with these enterprise software solutions.

Vendor: Oracle Corporation

CVE ID Title CVSS Severity Published
CVE-2026-83259 Oracle Commerce 11.4.0 远程未授权访问及DoS漏洞 7.1 High 2026-09-15
CVE-2026-83258 Oracle Commerce 11.4.0远程未授权接管漏洞 8.1 High 2026-09-15
CVE-2026-83256 Oracle Commerce 11.4.0 未授权接管漏洞 8.1 High 2026-09-15
CVE-2026-83254 Oracle Commerce 11.4.0 未授权接管漏洞 8.1 High 2026-09-15
CVE-2026-83257 Oracle Commerce 11.4.0 远程接管漏洞 7.5 High 2026-09-15
CVE-2026-83255 Oracle Commerce 11.4.0 未授权访问漏洞 8.1 High 2026-09-15
CVE-2026-83252 Oracle Commerce Guided Search 11.4.0未认证数据访问漏洞 7.0 High 2026-09-15
CVE-2026-83253 Oracle Commerce 11.4.0 未认证攻击者可接管 7.8 High 2026-09-15
CVE-2026-83251 Oracle Commerce 11.4.0 拒绝服务漏洞 6.5 Medium 2026-09-15
CVE-2026-83249 Oracle Commerce 11.4.0 低权限接管漏洞 7.8 High 2026-09-15
CVE-2026-83250 Oracle Commerce 11.4.0未认证访问漏洞 6.5 Medium 2026-09-15
CVE-2026-83248 Oracle Commerce 11.4.0:未认证远程DoS与数据读取 8.2 High 2026-09-15
CVE-2026-83246 Oracle Commerce 11.4.0未认证攻击者接管漏洞 8.1 High 2026-09-15
CVE-2026-83245 Oracle Commerce 11.4.0 Forge远程接管漏洞 8.1 High 2026-09-15
CVE-2026-83247 Oracle Commerce 11.4.0 未认证攻击者接管漏洞 7.8 High 2026-09-15
CVE-2026-83242 Oracle Commerce Experience Manager 11.4.0 未授权访问漏洞 7.3 High 2026-09-15
CVE-2026-83243 Oracle Commerce 11.4.0 Experience Manager 未授权访问漏洞 7.7 High 2026-09-15
CVE-2026-83244 CVE-2026-83244 7.1 High 2026-09-15
CVE-2026-83240 Oracle Commerce 11.4.0 低权限攻击致数据篡改及服务中断 7.1 High 2026-09-15
CVE-2026-83241 Oracle Commerce 11.4.0 未认证接管漏洞 7.5 High 2026-09-15
CVE-2026-83239 Oracle Commerce 11.4.0 Endeca控制器接管漏洞 7.0 High 2026-09-15
CVE-2026-83238 Oracle Commerce 11.4.0 未授权访问漏洞 7.1 High 2026-09-15
CVE-2026-83236 CVE-2026-83236 8.2 High 2026-09-15
CVE-2026-83237 Oracle Commerce 11.4.0 远程未授权访问漏洞 7.1 High 2026-09-15
CVE-2026-83234 Oracle Commerce 11.4.0 未授权数据访问漏洞 8.2 High 2026-09-15
CVE-2026-83235 Oracle Commerce 11.4.0 未授权访问漏洞 7.5 High 2026-09-15
CVE-2026-83233 Oracle Commerce 11.4.0经验管理器数据泄露漏洞 7.7 High 2026-09-15
CVE-2026-71038 Oracle Commerce 安全漏洞 7.5 High 2026-08-18
CVE-2026-71035 Oracle Commerce 安全漏洞 8.1 High 2026-08-18
CVE-2026-71036 Oracle Commerce 安全漏洞 9.1 Critical 2026-08-18

All 105 known CVE vulnerabilities affecting Oracle Commerce Guided Search / Oracle Commerce Experience Manager with full Chinese analysis, references, and POCs where available.