CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71014Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

  • 7.1 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71012Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

  • 7.8 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71010Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

  • 7.4 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71009Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated atta

  • 7.1 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71003Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

  • 8.5 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71002Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

  • 8.7 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-71000Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

  • 8.1 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70999Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacke

  • 9.3 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70998Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70997Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attack

  • 8.6 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70996Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

  • 9.8 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70995Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70994Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthentic

  • 8.2 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70993Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 7.0 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70992Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileg

  • 7.7 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70988Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged

  • 7.5 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70987Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 7.5 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70986Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 7.5 High severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70985Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70984Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70981Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.0 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70980Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthentica

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Missing Authentication for Critical Functionality

    CVE-2026-70979Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70978Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Missing Authentication for Critical Functionality

    CVE-2026-70977Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 9.1 Critical severity

    Oracle Commerce Guided Search / Oracle…: Improper Access Control

    CVE-2026-70976Oracle

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticate

  • 7.5 High severity

    Oracle Hyperion Infrastructure Technology: Missing Authentication for Critical Functionality

    CVE-2026-70973Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker wi

  • 7.1 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70971Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 9.8 Critical severity

    Oracle WebCenter Portal: Improper Access Control

    CVE-2026-70970Oracle

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

  • 7.1 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70967Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 8.8 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70966Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 8.8 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70965Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 8.2 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70964Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker wi

  • 7.6 High severity

    Oracle Hyperion Financial Management: Improper Privilege Management

    CVE-2026-70960Oracle

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 8.1 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70959Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 9.6 Critical severity

    Oracle Hyperion Infrastructure Technology: URL Redirection to Untrusted Site

    CVE-2026-70958Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 8.1 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-70957Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 8.8 High severity

    Oracle Hyperion Infrastructure Technology: Missing Authentication for Critical Functionality

    CVE-2026-70956Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 7.5 High severity

    Oracle Commerce Platform: Improper Access Control

    CVE-2026-70955Oracle

    Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical

  • 9.8 Critical severity

    Oracle Commerce Platform: Missing Authentication for Critical Functionality

    CVE-2026-70954Oracle

    Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP