What’s Vulnerable › Products

Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager vulnerabilities

159 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 105 published in the last 12 months.

Check whether your Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager version is affected

Exploited Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager vulnerabilities

• CVE-2021-39144 — XStream Remote Code Execution Vulnerability
• CVE-2022-22947 — VMware Spring Cloud Gateway Code Injection Vulnerability

Latest Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager vulnerabilities

• CVE-2026-83259 — (CVSS 7.1)
• CVE-2026-83258 — (CVSS 8.1)
• CVE-2026-83257 — (CVSS 7.5)
• CVE-2026-83256 — (CVSS 8.1)
• CVE-2026-83255 — (CVSS 8.1)
• CVE-2026-83254 — (CVSS 8.1)
• CVE-2026-83253 — (CVSS 7.8)
• CVE-2026-83252 — (CVSS 7.0)
• CVE-2026-83251 — (CVSS 6.5)
• CVE-2026-83250 — (CVSS 6.5)
• CVE-2026-83249 — (CVSS 7.8)
• CVE-2026-83248 — (CVSS 8.2)
• CVE-2026-83247 — (CVSS 7.8)
• CVE-2026-83246 — (CVSS 8.1)
• CVE-2026-83245 — (CVSS 8.1)
• CVE-2026-83244 — (CVSS 7.1)
• CVE-2026-83243 — (CVSS 7.7)
• CVE-2026-83242 — (CVSS 7.3)
• CVE-2026-83241 — (CVSS 7.5)
• CVE-2026-83240 — (CVSS 7.1)
• CVE-2026-83239 — (CVSS 7.0)
• CVE-2026-83238 — (CVSS 7.1)
• CVE-2026-83237 — (CVSS 7.1)
• CVE-2026-83236 — (CVSS 8.2)
• CVE-2026-83235 — (CVSS 7.5)