Login Request a demo
CM
Product
Commerce Merchandising
by Oracle · last CVE Mar 16, 2022
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 7Low 0
Severity
All severities8Critical0High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Commerce Merchandising to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-24729
7.5
2%
Mar 16
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
Affected: 11.3.2
CVE-2021-26272
6.5
2%
Jan 26
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
Affected: 11.3.0 through 11.3.2; 11.1.0; 11.2.0
CVE-2019-2713
6.5
1%
Apr 23
Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager)
Affected: 11.2.0.3
CVE-2020-27193
6.1
2%
Nov 12
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
Affected: 11.0.0; 11.1.0; 11.2.0; 11.3.0; 11.3.1; 11.3.2
CVE-2022-24728
5.4
1%
Mar 16
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
Affected: 11.3.2
CVE-2021-37695
5.4
1%
Aug 13
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 11.3.2
CVE-2021-32809
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 11.3.2
CVE-2021-32808
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 11.3.2
Showing 8