Advisories · Technology

Oracle Corporation Oracle Commerce Platform.

Every CVE that names Oracle Corporation Oracle Commerce Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-101560 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-70955 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-70954 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-70953 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-61137 CVE record

CVSS 8.1 High

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-61136 CVE record

CVSS 7.3 High

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61135 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-61134 CVE record

CVSS 6.8 Medium

Improper access control in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-61133 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Information disclosure
Not analysed yet 21 Jul 2026
CVE-2026-61132 CVE record

CVSS 7.6 High

Cross-site request forgery in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Cross-site request forgery (CSRF)
Not analysed yet 21 Jul 2026
CVE-2026-61131 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-61130 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Broken access control
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2026-61129 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Authentication bypass
Not analysed yet 21 Jul 2026
CVE-2025-21576 CVE record

CVSS 5.4 Medium

Cross-site request forgery in Oracle Corporation Oracle Commerce Platform
- Oracle Corporation Oracle Commerce Platform
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2025