Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,656CVE records
2,940Published, last 7 days
1,728In CISA KEV
1,421Critical, last 30 days
5,599Analysed
12:27 UTCLast NVD sync
Filters Show:
44 results. Oracle Commerce Platform.
Page 1 of 3| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70955 | High | 7.5 |  Oracle Commerce Platform | Improper access control | — | — | 0.33% | Aug 18, 2026 |
| CVE-2026-70954 | Critical | 9.8 | Oracle Commerce Platform | Missing authentication for critica | — | — | 0.51% | Aug 18, 2026 |
| CVE-2026-70953 | Critical | 9.8 | Oracle Commerce Platform | Missing authentication for critica | — | — | 0.51% | Aug 18, 2026 |
| CVE-2026-61137 | High | 8.1 | Oracle Commerce Platform | Improper authentication | — | — | 0.39% | Jul 21, 2026 |
| CVE-2026-61136 | High | 7.3 | Oracle Commerce Platform | Improper access control | — | — | 0.31% | Jul 21, 2026 |
| CVE-2026-61135 | High | 7.4 | Oracle Commerce Platform | Improper access control | — | — | 0.34% | Jul 21, 2026 |
| CVE-2026-61134 | Medium | 6.8 | Oracle Commerce Platform | Improper access control | — | — | 0.29% | Jul 21, 2026 |
| CVE-2026-61133 | High | 7.5 | Oracle Commerce Platform | Information exposure | — | — | 0.44% | Jul 21, 2026 |
| CVE-2026-61132 | High | 7.6 | Oracle Commerce Platform | Cross-site request forgery | — | — | 0.15% | Jul 21, 2026 |
| CVE-2026-61131 | Critical | 9.8 | Oracle Commerce Platform | Improper access control | — | — | 0.51% | Jul 21, 2026 |
| CVE-2026-61130 | Critical | 9.1 | Oracle Commerce Platform | Improper access control | — | — | 0.49% | Jul 21, 2026 |
| CVE-2026-61129 | Critical | 9.8 | Oracle Commerce Platform | Improper authentication | — | — | 0.51% | Jul 21, 2026 |
| CVE-2025-21576 | Medium | 5.4 | Oracle Commerce Platform | Cross-site request forgery | — | — | 0.19% | Apr 15, 2025 |
| CVE-2024-21100 | Medium | 4.0 | Oracle Commerce Platform | — | — | — | 0.35% | Apr 16, 2024 |
| CVE-2022-21559 | Medium | 5.5 | Oracle Commerce Platform | — | — | — | 0.24% | Jul 19, 2022 |
| CVE-2022-22965 | Critical | 9.8 |  Vmware Spring Framework +37 | Code injection | Listed | Confirmed | 100% | Apr 1, 2022 |
| CVE-2020-36518 | High | 7.5 |  Fasterxml Jackson Databind +35 | Out-of-bounds write | — | 2 refs | 4.9% | Mar 11, 2022 |
| CVE-2022-21387 | Medium | 5.3 | Oracle Commerce Platform | — | — | — | 1.1% | Jan 19, 2022 |
| CVE-2021-40690 | High | 7.5 |  Apache Santuario Xml Security For Java +17 | Information exposure | — | — | 7.4% | Sep 19, 2021 |
| CVE-2021-2351 | High | 8.3 | Oracle Advanced Networking Option +39 | Broken cryptographic algorithm | — | 8 refs | 2.4% | Jul 21, 2021 |
