What’s Vulnerable › Products
Oracle Corporation Oracle Commerce Platform vulnerabilities
45 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Oracle Corporation Oracle Commerce Platform version is affected
Exploited Oracle Corporation Oracle Commerce Platform vulnerabilities
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
- CVE-2020-2555 — Oracle Multiple Products Remote Code Execution Vulnerability
Latest Oracle Corporation Oracle Commerce Platform vulnerabilities
- CVE-2026-101560 — (CVSS 7.1)
- CVE-2026-70955 — (CVSS 7.5)
- CVE-2026-70954 — (CVSS 9.8)
- CVE-2026-70953 — (CVSS 9.8)
- CVE-2026-61137 — (CVSS 8.1)
- CVE-2026-61136 — (CVSS 7.3)
- CVE-2026-61135 — (CVSS 7.4)
- CVE-2026-61134 — (CVSS 6.8)
- CVE-2026-61133 — (CVSS 7.5)
- CVE-2026-61132 — (CVSS 7.6)
- CVE-2026-61131 — (CVSS 9.8)
- CVE-2026-61130 — (CVSS 9.1)
- CVE-2026-61129 — (CVSS 9.8)
- CVE-2025-21576 — (CVSS 5.4)
- CVE-2024-21100 — (CVSS 4.0)
- CVE-2022-21559 — (CVSS 5.5)
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2020-36518 — (CVSS 7.5)
- CVE-2022-21387 — (CVSS 5.0)
- CVE-2021-40690 — Bypass of the secureValidation property (CVSS 7.5)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-2463 — (CVSS 7.5)
- CVE-2020-36183 — (CVSS 8.1)
- CVE-2020-36182 — (CVSS 8.1)
- CVE-2020-36180 — (CVSS 8.1)