Known vulnerabilities in Oracle Commerce Guided Search - page 3

Vendor: Oracle
Software: Oracle Commerce Guided Search
Software CPE: cpe:2.3:a:oracle:oracle_commerce_guided_search:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 81
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Commerce Guided Search Oracle Commerce Guided Search is affected by 81 known vulnerabilities: 2 critical, 11 high, 53 medium, 15 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729		 CWE-185 Low
No
No
 - 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165		 CWE-79 Medium
No
No
 - 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU55238 - Improper input validation
CVE-2020-7712		 CWE-20 Medium
No
No
 - 22.07.2021 SB2021072720
SB2022012312
SB2022071932
and 2 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 - 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 - 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU30727 - Cross-Site Request Forgery (CSRF)
CVE-2019-17495		 CWE-352 Medium
No
No
 - 11.10.2019 SB2019101115
SB2020102846
SB2020102933
and 12 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 41 - 60 out of 81