Product by Oracle
Oracle Commerce Platform
45 known vulnerabilities in Oracle Commerce Platform (Oracle), 2 of them actively exploited (CISA KEV).
Key figures
45
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products | 9.8 | |
| Critical | CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability In CISA KEValso in 10 other products | 9.8 | |
| High | CVE-2020-36179 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-35728 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-25649 | Jackson-databind: Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2020-36188 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36184 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2021-40690 | Bypass of the secureValidation property | 7.5 | |
| High | CVE-2020-36183 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36185 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36187 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36186 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36180 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36182 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36181 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36189 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36518 | FasterXML Jackson-databind: Denial of Service | 7.5 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Critical | CVE-2021-2463 | Oracle Commerce Platform: security vulnerability | 9.8 | |
| Critical | CVE-2026-70954 | Oracle Commerce Platform: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2026-70953 | Oracle Commerce Platform: Missing Authentication for Critical Function | 9.8 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Critical | CVE-2026-61131 | Oracle Commerce Platform: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2026-61129 | Oracle Commerce Platform: Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2020-14535 | Oracle Commerce Platform: security vulnerability | 7.4 |