CG
Product
Commerce Guided Search
On CISA KEVExploited in the wild
132
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 71Medium 37Low 1
Watch
Add Commerce Guided Search to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22947 In wildKEV | 10.0 | Mar 3 | VMware Spring Cloud Gateway Code Injection Vulnerability Affected: 11.3.2 |
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: 11.3.2 |
| CVE-2026-61146 | 9.9 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70995 | 9.8 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-61161 | 9.8 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-61145 | 9.8 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2019-12419 | 9.8 | Nov 6 | Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service Affected: 11.3.2 |
| CVE-2026-71037 | 9.3 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-70998 | 9.3 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-71036 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-71026 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-71015 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-71014 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-70997 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-70994 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-70984 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70981 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70979 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70978 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70977 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-70976 | 9.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-61153 | 9.1 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-70980 | 9.0 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2026-61149 | 8.8 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-61148 | 8.8 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2021-39139 | 8.8 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2026-71000 | 8.7 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-70996 | 8.6 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-71002 | 8.5 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2021-39150 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling Affected: 11.3.2 |
| CVE-2021-39152 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling Affected: 11.3.2 |
| CVE-2021-39149 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39148 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39147 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39146 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39145 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39141 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39151 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2021-39154 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.3.2 |
| CVE-2026-71024 | 8.2 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge) Affected: 11.4.0 |
| CVE-2026-71018 | 8.2 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-71016 | 8.2 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0 |
| CVE-2026-70993 | 8.2 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0 |
| CVE-2016-5482 | 8.2 | Oct 25 | Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect… Affected: 6.2.2; 6.3.0; 6.4.1.2; 6.5.0; 6.5.1; 6.5.2 |
| CVE-2026-71035 | 8.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge) Affected: 11.4.0 |
| CVE-2026-70999 | 8.1 | Aug 18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-61163 | 8.1 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge) Affected: 11.4.0 |
| CVE-2026-61160 | 8.1 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2026-61150 | 8.1 | Jul 21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0 |
| CVE-2021-20190 | 8.1 | Jan 19 | A flaw was found in jackson-databind before 2.9.10.7 Affected: 11.3.2 |