Latest vulnerabilities for "oracle commerce guided search"

6.1

First published (updated )

CVE-2023-22029

Oracle Commerce Guided SearchVulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and …

7.5

First published (updated )

CVE-2022-21466

Oracle Communications Cloud Native Core Network Repository FunctionIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 …

5.5

First published (updated )

CVE-2022-22946

Oracle Communications Cloud Native Core Network Repository FunctionVMware Spring Cloud Gateway Code Injection Vulnerability

critical

10

Exploited

First published (updated )

CVE-2022-22947

Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream

7.5

First published (updated )

CVE-2021-43859

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking ApisHTML comments vulnerability allowing to execute JavaScript code

8.2

First published (updated )

CVE-2021-41165

Oracle Banking ApisAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2

First published (updated )

CVE-2021-41164

Oracle Retail Financial IntegrationBypass of the secureValidation property

7.5

First published (updated )

CVE-2021-40690

Oracle Communications Cloud Native Core Network Repository Functioncurl. Multiple issues were addressed by updating to curl version 7.79.1.

6.1

First published (updated )

CVE-2021-22947

Oracle Communications Cloud Native Core Network Repository Functioncurl. Multiple issues were addressed by updating to curl version 7.79.1.

7.5

First published (updated )

CVE-2021-22946

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37137

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37136

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39147

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39151

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39148

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39145

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39146

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39149

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

8.5

First published (updated )

CVE-2021-39150

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

8.5

First published (updated )

CVE-2021-39152

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39154

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39141

Oracle Utilities FrameworkXStream can cause a Denial of Service

6.5

First published (updated )

CVE-2021-39140

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fedoraproject FedoraExecution of JavaScript code using malformed HTML in ckeditor

7.3

First published (updated )

CVE-2021-37695

Fedoraproject FedoraArbitrary HTML injection vulnerability in ckeditor

5.4

First published (updated )

CVE-2021-32809

Fedoraproject FedoraCross-site scripting in ckeditor via abuse of undo functionality

7.6

First published (updated )

CVE-2021-32808

Oracle Commerce Experience ManagerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

4.3

First published (updated )

CVE-2021-2348

Oracle Commerce Experience ManagerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of O…

5.4

First published (updated )

CVE-2021-2346

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.