Oracle Commerce Guided Search / Oracle Commerce Experience Manager vulnerabilities

84 known vulnerabilities in Oracle Commerce Guided Search / Oracle Commerce Experience Manager from Oracle. 84 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83259Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83258Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83257Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with netw

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83256Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83255Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83254Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83253Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.0 High severity

  Oracle Commerce Guided Search / Oracle…: Missing Authentication for Critical Functionality

  CVE-2026-83252Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83249Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logo

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Uncontrolled Resource Consumption

  CVE-2026-83248Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83247Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83246Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83245Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83244Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with acc

• 7.7 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83243Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 7.3 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83242Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83241Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83240Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon

• 7.0 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-83239Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privi

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83238Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 7.1 High severity

  Oracle Commerce Guided Search / Oracle…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83237Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83236Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83235Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83234Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 7.7 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-83233Sep 15, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71038Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 9.3 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71037Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Privilege Management

  CVE-2026-71036Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

• 8.1 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71035Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71034Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71032Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71030Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.8 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71028Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71027Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 9.1 Critical severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71026Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 8.2 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71024Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71023Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71022Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with ne

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71021Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile

• 7.6 High severity

  Oracle Commerce Guided Search / Oracle…: Improper Access Control

  CVE-2026-71020Aug 18, 2026Oracle

  Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privile