commerce experience manager vulnerabilities and fixes

Recent CVEs affecting commerce experience manager, with upgrade or downgrade steps. 58 tracked.

commerce experience manager has 58 tracked vulnerabilities, 14 critical. A fixed release or vendor patch exists for 44. Most recent: 2026-08-18. Highest priority: CVE-2026-70995 (score 50/100).

• CVE-2026-71014 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71012 HIGH 7.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71010 HIGH 7.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71011 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70995 CRITICAL 9.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70978 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71015 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70994 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70997 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70976 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70977 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70979 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70981 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70984 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71026 CRITICAL 9.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70980 CRITICAL 9.0 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70996 HIGH 8.6 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70998 CRITICAL 9.3 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71024 HIGH 8.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70993 HIGH 8.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71035 HIGH 8.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70985 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70986 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70987 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71034 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71023 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71000 HIGH 8.7 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71009 HIGH 7.4 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70990 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70999 HIGH 8.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70982 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70983 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71002 HIGH 8.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71016 HIGH 8.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71018 HIGH 8.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71030 HIGH 7.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71032 HIGH 7.2 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70988 HIGH 7.7 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71017 MEDIUM 6.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71003 HIGH 7.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71007 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71008 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71020 HIGH 7.6 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71021 HIGH 7.6 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71022 HIGH 7.6 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71027 HIGH 7.6 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71001 MEDIUM 6.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71028 HIGH 7.8 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70992 HIGH 7.0 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71004 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71005 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71006 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71019 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71025 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71031 MEDIUM 6.1 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70989 MEDIUM 6.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-70991 MEDIUM 6.3 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm
• CVE-2026-71033 MEDIUM 5.5 DOWNGRADE DOWNGRADE Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm

FAQ

How do I fix commerce experience manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is commerce experience manager being exploited right now?

None of the tracked commerce experience manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which commerce experience manager CVE should I patch first?

CVE-2026-70995 currently ranks highest (50/100): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Comm.

← Back to latest CVEs