Known vulnerabilities in Oracle Commerce Guided Search - page 4

Vendor: Oracle
Software: Oracle Commerce Guided Search
Software CPE: cpe:2.3:a:oracle:oracle_commerce_guided_search:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 81
Public exploits: 16
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Commerce Guided Search Oracle Commerce Guided Search is affected by 81 known vulnerabilities: 2 critical, 11 high, 53 medium, 15 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62395 - Improper input validation
CVE-2022-21466		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041936
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 - 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU59813 - Improper input validation
CVE-2021-39139		 CWE-20 High
No
No
 - 19.01.2022 SB2022011911
SB2022011912
SB2022012325
and 21 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 - 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55160 - Improper input validation
CVE-2021-2345		 CWE-20 Medium
No
No
 - 21.07.2021 SB2021072117
#VU55161 - Improper input validation
CVE-2021-2346		 CWE-20 Medium
No
No
 - 21.07.2021 SB2021072117
#VU55162 - Improper input validation
CVE-2021-2348		 CWE-20 Low
No
No
 - 21.07.2021 SB2021072117
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118		 CWE-264 Low
No
No
 - 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU49967 - Deserialization of Untrusted Data
CVE-2021-20190		 CWE-502 High
No
No
 - 19.01.2021 SB2021012514
SB2021042826
SB2021050708
and 17 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU29921 - Improper input validation
CVE-2020-14536		 CWE-20 Medium
No
No
 11.3.1 15.07.2020 SB2020071524
#VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13935		 CWE-835 Medium
Available
No
 - 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 14 more
#VU27701 - Insufficiently Protected Credentials
CVE-2019-12423		 CWE-522 Medium
No
No
 - 12.05.2020 SB2020011628
SB2020071609
SB2020071610
and 7 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25077 - Improper input validation
CVE-2020-2604		 CWE-20 High
No
No
 - 07.02.2020 SB2020011491
SB2020012726
SB2020012727
and 35 more
#VU642 - Buffer over-read
CVE-2016-2176		 CWE-126 Low
No
No
 - 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 - 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more


Showing elements 61 - 80 out of 81