Unscored severity · published Apr 16, 2015
CVE-2015-0495
Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to…
–
CVSS
2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Commerce Experience Manager · Oracle
All versions, or not specified · source: NVD
CG
Commerce Guided Search · Oracle
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0495
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0495
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
More from Commerce Experience Manager
9.9
CVE-2026-61146
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System)
9.8
CVE-2026-70995
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller)
9.8
CVE-2026-61161
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller)
9.8
CVE-2026-61145
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System)
9.3
CVE-2026-70998
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller)