oracle commerce platform güvenlik açıkları (CVE)

oracle commerce platform için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

17 sonuç
7.1Yüksek
CVE-2026-101560
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c…

7.5Yüksek
CVE-2026-70955
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physi…

9.8Kritik
CVE-2026-70954
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT…

9.8Kritik
CVE-2026-70953
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TC…

8.1Yüksek
CVE-2026-61137
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via …

7.3Yüksek
CVE-2026-61136
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT…

7.4Yüksek
CVE-2026-61135
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via …

6.8Orta
CVE-2026-61134
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via H…

7.5Yüksek
CVE-2026-61133
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LD…

7.6Yüksek
CVE-2026-61132
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTT…

9.8Kritik
CVE-2026-61131
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT…

9.1Kritik
CVE-2026-61130
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT…

9.8Kritik
CVE-2026-61129
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise …

5.4Orta
CVE-2025-21576
Oracle Corporation Oracle Commerce Platform

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with net…

9.8Kritik
CVE-2022-22965 KEV

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Spring Framework

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

100%EPSS
8.3Yüksek
CVE-2021-2351
Oracle Corporation WebLogic Server

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to …

2.4%EPSS
9.8Kritik
CVE-2020-2555 KEV

Oracle Multiple Products Remote Code Execution Vulnerability

Oracle Corporation WebCenter Portal; Oracle Corporation Utilities Framework

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthentica…

97%EPSS