Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

109 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-61146	Analizada	Crítica (9.9)	0.43%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	21/7/2026	24/7/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-61145	Analizada	Crítica (9.8)	0.51%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	21/7/2026	24/7/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2021-2348	Modificada	Media (4.3)	0.86%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	21/7/2021	17/6/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2346	Modificada	Media (5.4)	0.51%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	21/7/2021	17/6/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2345	Modificada	Media (5.4)	0.65%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	21/7/2021	17/6/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-20190	Analizada	Alta (8.1)	7.5%	—	Fasterxml Jackson-databind Netapp Active IQ Unified Manager Netapp Oncommand API Services Netapp Oncommand Insight+5	19/1/2021	24/7/2026	A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2020-14536	Modificada	Alta (7.4)	1.6%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	15/7/2020	17/6/2026	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2020-2604	Modificada	Alta (8.1)	4.9%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search Oracle Graalvm Oracle JDK+23	15/1/2020	17/6/2026	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols…
CVE-2015-0495	Analizada	Alta (7.5)	2.0%	—	Oracle Commerce Experience Manager Oracle Commerce Guided Search	16/4/2015	24/7/2026	Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.