Oracle Oracle Commerce Platform

Name: Oracle Oracle Commerce Platform
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical1high0medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-66516US	critical9.8	89.0% (100th)	Exploit	no fix	2025-12-04	≤ vers:unknown/*
CVE-2025-48976US	—	32.9% (98th)	Exploit	no fix	2025-06-16	≤ vers:unknown/*
CVE-2025-48924US	—	2.63% (85th)	Exploit	no fix	2025-07-11	≤ vers:unknown/*
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	no fix	2025-08-13	≤ vers:unknown/*
CVE-2025-41249US	—OT elevated	0.48% (41st)	Exploit	no fix	2025-09-16	≤ vers:unknown/*
CVE-2025-48989US	—	3.69% (90th)	—	no fix	2025-08-13	≤ vers:unknown/*
CVE-2025-9086US	—	1.46% (73rd)	—	no fix	2025-09-12	≤ vers:unknown/*
CVE-2024-47554US	—	1.31% (71st)	—	no fix	2024-10-03	≤ vers:unknown/*
CVE-2025-61795US	—	1.25% (69th)	—	no fix	2025-10-27	≤ vers:unknown/*
CVE-2025-48795US	—	0.73% (54th)	—	no fix	2025-07-15	≤ vers:unknown/*
CVE-2025-50059US	—	0.61% (49th)	—	no fix	2025-07-15	≤ vers:unknown/*
CVE-2024-57699US	—	0.59% (48th)	—	no fix	2025-02-05	≤ vers:unknown/*
CVE-2026-61161US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61154US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61145US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61131US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61129US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61155US	—OT elevated	0.49% (42nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61130US	—OT elevated	0.49% (42nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2025-22233US	—	0.43% (38th)	—	no fix	2025-05-16	≤ vers:unknown/*
CVE-2026-61146US	—OT elevated	0.43% (37th)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61156US	—	0.43% (37th)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-61153US	—	0.43% (37th)	—	no fix	2026-07-21	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control9 CVEs
CWE-306Missing Authentication for Critical Function8 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-674Uncontrolled Recursion2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan