Commerce Platform vulnerabilities | LiveThreat CVE Feed

Product

Commerce Platform

by Oracle · last CVE Aug 18, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities44 In the news0 Timeline

Severity mix

Critical 8High 22Medium 10Low 1

Severity

All severities44 Critical8 High22 Medium10 Low1

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Commerce Platform to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-61134	6.8	0%	Jul 21	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework) Affected: 11.4.0
CVE-2019-10219	6.1	2%	Nov 8	A vulnerability was found in Hibernate-Validator Affected: 11.3.0 through 11.3.2
CVE-2019-2712	6.1	1%	Apr 23	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework) Affected: 11.2.0.3; 11.3.1
CVE-2019-2659	6.1	1%	Apr 23	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework) Affected: 11.2.0.3
CVE-2022-21559	5.5	0%	Jul 19	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework) Affected: 11.3.0; 11.3.1; 11.3.2
CVE-2025-21576	5.4	0%	Apr 15	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server) Affected: 11.3.0; 11.3.1; 11.3.2
CVE-2022-21387	5.3	1%	Jan 19	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework) Affected: 11.3.0; 11.3.1; 11.3.2
CVE-2020-14532	4.7	1%	Jul 15	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework) Affected: 11.1 before 11.3.1
CVE-2017-3296	4.3	1%	Jan 27	Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework) Affected: 10.0.3.5; 10.2.0.5; 11.2.0.2
CVE-2024-21100	4.0	0%	Apr 16	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform) Affected: 11.3.0; 11.3.1; 11.3.2