Commerce Guided Search And Experience Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-20190 Maven HIGH PATCH This Week

A flaw was found in jackson-databind before 2.9.10.7. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Jackson Databind Active Iq Unified Manager Oncommand Api Services Oncommand Insight +4

NVD GitHub

CVSS 3.1

8.1

EPSS

7.5%

CVE-2015-0495 HIGH This Week

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Oracle Commerce Guided Search And Experience Manager

NVD

CVSS 2.0

7.5

EPSS

0.7%

CVE-2021-20190 Maven

EPSS 7% CVSS 8.1

HIGH PATCH This Week

Deserialization Jackson Databind Active Iq Unified Manager +6

NVD GitHub

CVE-2015-0495

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure Oracle Commerce Guided Search And Experience Manager

NVD