Oracle Commerce Experience Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Commerce Experience Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (24)

• CVE-2026-61146 — CVSS 9.9 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61161 — CVSS 9.8 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-61145 — CVSS 9.8 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61153 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61149 — CVSS 8.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61148 — CVSS 8.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2021-20190 — CVSS 8.1 (high): A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The…
• CVE-2020-2604 — CVSS 8.1 (high): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected…
• CVE-2026-61163 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The…
• CVE-2026-61150 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61160 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2015-0495 — CVSS 7.5 (high): Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform…
• CVE-2026-61157 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61158 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61159 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2020-14536 — CVSS 7.4 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench)…
• CVE-2026-61164 — CVSS 7.4 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61151 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61162 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-61147 — CVSS 6.2 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61152 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2021-2346 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…
• CVE-2021-2345 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…
• CVE-2021-2348 — CVSS 4.3 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…