Oracle Commerce Experience Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Commerce Experience Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (82)

• CVE-2026-61146 — CVSS 9.9 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70995 — CVSS 9.8 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-61145 — CVSS 9.8 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61161 — CVSS 9.8 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70998 — CVSS 9.3 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70976 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71026 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71015 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71014 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70997 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61153 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70984 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70981 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70979 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70978 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70977 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70994 — CVSS 9.1 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70980 — CVSS 9.0 (critical): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61148 — CVSS 8.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61149 — CVSS 8.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71000 — CVSS 8.7 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70996 — CVSS 8.6 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71002 — CVSS 8.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71024 — CVSS 8.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The…
• CVE-2026-70993 — CVSS 8.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71016 — CVSS 8.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71018 — CVSS 8.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71035 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The…
• CVE-2026-61163 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The…
• CVE-2021-20190 — CVSS 8.1 (high): A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The…
• CVE-2026-61150 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2020-2604 — CVSS 8.1 (high): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected…
• CVE-2026-70999 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61160 — CVSS 8.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71028 — CVSS 7.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71010 — CVSS 7.8 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70988 — CVSS 7.7 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71027 — CVSS 7.6 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71022 — CVSS 7.6 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench)…
• CVE-2026-71021 — CVSS 7.6 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71020 — CVSS 7.6 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70985 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61159 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61158 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61157 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70986 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70987 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71034 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The…
• CVE-2026-71023 — CVSS 7.5 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2015-0495 — CVSS 7.5 (high): Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform…
• CVE-2020-14536 — CVSS 7.4 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench)…
• CVE-2026-71009 — CVSS 7.4 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61164 — CVSS 7.4 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71032 — CVSS 7.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71030 — CVSS 7.2 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71003 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61151 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-61162 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71012 — CVSS 7.1 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70992 — CVSS 7.0 (high): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-70990 — CVSS 6.8 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71007 — CVSS 6.8 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70983 — CVSS 6.8 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71008 — CVSS 6.8 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70982 — CVSS 6.8 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71001 — CVSS 6.5 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-70989 — CVSS 6.5 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71017 — CVSS 6.5 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-70991 — CVSS 6.3 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-61147 — CVSS 6.2 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content…
• CVE-2026-71019 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal…
• CVE-2026-71004 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71005 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71006 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71011 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2026-71025 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71031 — CVSS 6.1 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-71033 — CVSS 5.5 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca…
• CVE-2026-61152 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience…
• CVE-2021-2346 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…
• CVE-2021-2345 — CVSS 5.4 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…
• CVE-2021-2348 — CVSS 4.3 (medium): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and…