CP
Product
Commerce Platform
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
44
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 22Medium 10Low 1
Watch

Add Commerce Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-22965
In wildKEV
9.8
100%
Apr 1
Spring Framework JDK 9+ Remote Code Execution Vulnerability
Affected: 11.3.2
CVE-2020-2555
In wildKEV
9.8
97%
Jan 15
Oracle Multiple Products Remote Code Execution Vulnerability
Affected: 11.3.0 through 11.3.2; 11.0.0; 11.1.0; 11.2.0
CVE-2026-70954
9.8
1%
Aug 18
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)
Affected: 11.4.0
CVE-2026-70953
9.8
1%
Aug 18
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)
Affected: 11.4.0
CVE-2026-61131
9.8
1%
Jul 21
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)
Affected: 11.4.0
CVE-2026-61129
9.8
1%
Jul 21
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals)
Affected: 11.4.0
CVE-2021-2463
9.8
2%
Jul 21
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)
Affected: 11.3.0 through 11.3.2; 11.0.0; 11.1.0; 11.2.0
CVE-2026-61130
9.1
0%
Jul 21
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)
Affected: 11.4.0
Showing 8