Commerce Experience Manager vulnerabilities | LiveThreat CVE Feed

Product

Commerce Experience Manager

by Oracle · last CVE Aug 18, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities82 In the news0 Timeline

Severity mix

Critical 18High 41Medium 22Low 0

Severity

All severities82 Critical18 High41 Medium22 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Commerce Experience Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-61164	7.4	0%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2020-14536	7.4	2%	Jul 15	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench) Affected: 11.0 before 11.3.1
CVE-2026-71032	7.2	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-71030	7.2	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-71012	7.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71003	7.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-61162	7.1	0%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-61151	7.1	0%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-70992	7.0	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-71008	6.8	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71007	6.8	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-70990	6.8	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-70983	6.8	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-70982	6.8	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-71017	6.5	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-71001	6.5	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-70989	6.5	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-70991	6.3	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-61147	6.2	0%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System) Affected: 11.4.0
CVE-2026-71031	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-71025	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-71019	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal operations) Affected: 11.4.0
CVE-2026-71011	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71006	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71005	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71004	6.1	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2026-71033	5.5	0%	Aug 18	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller) Affected: 11.4.0
CVE-2026-61152	5.4	0%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager) Affected: 11.4.0
CVE-2021-2346	5.4	1%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks) Affected: 11.3.1.5
CVE-2021-2345	5.4	1%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks) Affected: 11.3.1.5
CVE-2021-2348	4.3	1%	Jul 21	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks) Affected: 11.3.1.5
CVE-2015-0495	–	2%	Apr 16	Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to… Affected: All versions, or not specified