Commerce Guided Search vulnerabilities

61 known vulnerabilities in Commerce Guided Search from Oracle. 61 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71038Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 9.3 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71037Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-71036Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71035Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71034Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71032Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71030Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71028Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71027Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71026Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71024Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71023Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71022Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with ne

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71021Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71020Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71018Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71016Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Missing Authentication for Critical Functionality

  CVE-2026-71015Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71014Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71012Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71010Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.4 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71009Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated atta

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71003Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71002Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.7 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71000Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70999Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 9.3 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70998Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70997Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 8.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70996Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 9.8 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70995Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70994Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70993Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 7.0 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70992Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileg

• 7.7 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70988Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70987Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70986Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70985Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70984Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70981Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

• 9.0 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-70980Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentica