Product by Oracle

    Oracle Commerce Merchandising

    8 known vulnerabilities in Oracle Commerce Merchandising (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Commerce Merchandising (Oracle)
    HighCVE-2022-24729

    Regular expression Denial of Service in dialog plugin

    also in 9 other products

    		6.5
    MediumCVE-2021-26272

    CKEditor: security vulnerability

    also in 9 other products

    		6.5
    MediumCVE-2020-27193

    CKEditor: Cross-Site Scripting (XSS)

    also in 8 other products

    		6.1
    HighCVE-2021-37695

    Execution of JavaScript code using malformed HTML in ckeditor

    also in 12 other products

    		7.3
    HighCVE-2021-32808

    Cross-site scripting in ckeditor via abuse of undo functionality

    also in 13 other products

    		7.6
    MediumCVE-2022-24728

    Cross-site Scripting in CKEditor4

    also in 9 other products

    		5.4
    MediumCVE-2019-2713

    Oracle Commerce Merchandising: security vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2021-32809

    Arbitrary HTML injection vulnerability in ckeditor

    also in 10 other products

    		4.6

    All products by Oracle