Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle commerce platform 11.3.1 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2

CVE-2019-2712

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to ...
Oracle Commerce Platform 11.2.0.3Oracle Commerce Platform 11.3.1
5.5
CVSSv3

CVE-2022-21559

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...
Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2
5
CVSSv2

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2
4
CVSSv3

CVE-2024-21100

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2
4.3
CVSSv2

CVE-2020-27193

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Ckeditor Ckeditor 4.15.0Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Commerce Merchandising 11.0.0Oracle Commerce Merchandising 11.1.0
4.3
CVSSv2

CVE-2020-14532

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.1, 11.2 and before 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
Oracle Commerce Platform
4.9
CVSSv2

CVE-2020-14533

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.1, 11.2 and before 11.3.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...
Oracle Commerce Platform
5
CVSSv2

CVE-2020-36518

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Big Data Spatial And GraphOracle Coherence 14.1.1.0.0Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2Oracle Communications Billing And Revenue ManagementOracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0
5
CVSSv2

CVE-2021-36090

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip pack...
Apache Commons CompressOracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital ExperienceOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0
5.1
CVSSv2

CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...
Oracle Advanced Networking Option 12.1.0.2Oracle Advanced Networking Option 12.2.0.1Oracle Advanced Networking Option 19cOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.6Oracle Agile Product Lifecycle Management For Process 6.2.2.0Oracle Agile Product Lifecycle Management For Process 6.2.3.0Oracle Airlines Data Model 12.1.1.0.0Oracle Airlines Data Model 12.2.0.1.0Oracle Application Performance Management 13.4.1.0Oracle Application Performance Management 13.5.1.0Oracle Application Testing Suite 13.3.0.1
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
local file inclusiondcmtkCVE-2025-24813CVE-2023-52315directory listings wordpress plugin – ulistingCVE-2025-2348IDORCVE-2024-12336vamCVE-2025-24856wirelesswordpress form builder plugin for contact forms, surveys and quizzes – tripettoCVE-2024-55591
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook