Product by Oracle Corporation

    Oracle Commerce Platform

    14 known vulnerabilities in Oracle Commerce Platform (Oracle Corporation), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Commerce Platform (Oracle Corporation)
    CriticalCVE-2026-70954

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-70953

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-61131

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-61129

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    CriticalCVE-2026-61130

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		9.1
    HighCVE-2026-61137

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		8.1
    HighCVE-2026-61133

    Oracle Commerce Platform: Exposure of Sensitive Information to an Unauthorized Actor

    also in 2 other products

    		7.5
    HighCVE-2026-101560

    Oracle Commerce Platform: security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2026-70955

    Oracle Commerce Platform: Improper Access Control

    also in 2 other products

    		7.5
    HighCVE-2026-61135

    Oracle Commerce Platform: Missing Authentication for Critical Function

    also in 2 other products

    		7.4
    HighCVE-2026-61136

    Oracle Commerce Platform: Improper Access Control

    also in 2 other products

    		7.3
    HighCVE-2026-61132

    Oracle Commerce Platform: Cross-Site Request Forgery (CSRF)

    also in 2 other products

    		7.6
    MediumCVE-2026-61134

    Oracle Commerce Platform: Improper Access Control

    also in 2 other products

    		6.8
    MediumCVE-2025-21576

    Oracle Commerce Platform: security vulnerability

    also in 1 other product

    		5.4

    All products by Oracle Corporation