Known vulnerabilities in Oracle Commerce Guided Search

Vendor: Oracle
Software: Oracle Commerce Guided Search
Software CPE: cpe:2.3:a:oracle:oracle_commerce_guided_search:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 81
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Commerce Guided Search Oracle Commerce Guided Search is affected by 81 known vulnerabilities: 2 critical, 11 high, 53 medium, 15 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 - 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 - 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 - 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 - 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU109251 - Security Features
CVE-2025-22233		 CWE-254 Low
No
No
 - 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU107411 - Heap-based Buffer Overflow
CVE-2024-56406		 CWE-122 High
Available
No
 - 14.04.2025 SB2025041424
SB2025041425
SB2025041429
and 18 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 - 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU103646 - Integer overflow
CVE-2025-0725		 CWE-190 High
No
No
 - 05.02.2025 SB2025020531
SB2025020601
SB2025020658
and 25 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 - 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more


Showing elements 1 - 20 out of 81