What’s Vulnerable › Products

Oracle Corporation Commerce Merchandising vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Corporation Commerce Merchandising version is affected

Latest Oracle Corporation Commerce Merchandising vulnerabilities

• CVE-2022-24729 — Regular expression Denial of Service in dialog plugin (CVSS 7.5)
• CVE-2022-24728 — Cross-site Scripting in CKEditor4 (CVSS 5.4)
• CVE-2021-37695 — Execution of JavaScript code using malformed HTML in ckeditor (CVSS 5.4)
• CVE-2021-32809 — Arbitrary HTML injection vulnerability in ckeditor (CVSS 5.4)
• CVE-2021-32808 — Cross-site scripting in ckeditor via abuse of undo functionality (CVSS 5.4)
• CVE-2021-26272 — (CVSS 6.5)
• CVE-2020-27193 — (CVSS 6.1)
• CVE-2019-2713 — (CVSS 6.5)