High WID-SEC-2026-2888 66 CVEs

Oracle Commerce: Mehrere Schwachstellen

Published Aug 18, 2026 · Updated Aug 18, 2026 · de-DE

Vendor: Oracle Product: Commerce Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Commerce ist eine elektronische Handelsplattform.

Vulnerabilities 66

Critical 9.8

CVE-2026-70953

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The…

Oracle Oracle Commerce Platform

Aug 18, 2026
Critical 9.8

CVE-2026-70954

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The…

Oracle Oracle Commerce Platform

Aug 18, 2026
Critical 9.8

CVE-2026-70995

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.3

CVE-2026-70998

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.3

CVE-2026-71037

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70976

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70977

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70978

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70979

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70981

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70984

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70994

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-70997

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-71014

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-71015

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-71026

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.1

CVE-2026-71036

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Critical 9.0

CVE-2026-70980

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.8

CVE-2024-9143 EPSS 12%

Low-level invalid GF(2^m) parameters lead to OOB memory access

Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a pos…

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 16, 2024
High 8.7

CVE-2026-71000

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.6

CVE-2026-70996

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.5

CVE-2026-71002

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.2

CVE-2026-70993

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.2

CVE-2026-71016

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.2

CVE-2026-71018

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.2

CVE-2026-71024

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.1

CVE-2026-70999

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 8.1

CVE-2026-71035

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.8

CVE-2026-71010

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.8

CVE-2026-71028

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.7

CVE-2026-70988

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.6

CVE-2026-71020

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.6

CVE-2026-71021

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.6

CVE-2026-71022

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.6

CVE-2026-71027

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-70955

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The…

Oracle Oracle Commerce Platform

Aug 18, 2026
High 7.5

CVE-2026-70985

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-70986

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-70987

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-71023

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-71034

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.5

CVE-2026-71038

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.4

CVE-2026-71009

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.2

CVE-2026-71030

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.2

CVE-2026-71032

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.1

CVE-2026-71003

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.1

CVE-2026-71012

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
High 7.0

CVE-2026-70992

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.8

CVE-2026-70982

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.8

CVE-2026-70983

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.8

CVE-2026-70990

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.8

CVE-2026-71007

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.8

CVE-2026-71008

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.5

CVE-2022-23437 EPSS 12%

Infinite loop within Apache XercesJ xml parser

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged durat…

Apache Software Foundation Apache Xerces xerces:xercesImpl libxerces2-java Debian Ubuntu Azure Linux Maven

Jan 24, 2022
Medium 6.5

CVE-2026-70989

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.5

CVE-2026-71001

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.5

CVE-2026-71017

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.3

CVE-2026-70991

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71004

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71005

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71006

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71011

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71019

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71025

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 6.1

CVE-2026-71031

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026
Medium 5.5

CVE-2026-71033

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (com…

Oracle Oracle Commerce Guided Search / Oracle Commerce Experience Manager

Aug 18, 2026

Revision history

2026-08-18 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - August 2026 - Appendix Oracle Commerce vom 2026-08-18
https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixOCOM