Commerce Guided Search And Experience Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-20190 Jan 19, 17:15 Maven HIGH PATCH This Week

A flaw was found in jackson-databind before 2.9.10.7. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Apache Deserialization Debian Oracle Active Iq Unified Manager +9

NVD GitHub VulDB

CVSS 3.1

8.1

EPSS

7.5%

CVE-2015-0495 Apr 16, 16:59 HIGH This Week

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Oracle Commerce Guided Search And Experience Manager

NVD VulDB

CVSS 2.0

7.5

EPSS

0.7%

CVE-2021-20190 Maven

EPSS 7% CVSS 8.1

HIGH PATCH This Week

Apache Deserialization Debian +11

NVD GitHub VulDB

CVE-2015-0495

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Oracle Commerce Guided Search And Experience Manager

NVD VulDB