Threat Intelligence Database

CVE-2026-70955 is a vulnerability in Oracle Commerce Platform version 11.4.0 affecting the Dynamo Application Framework component. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the platform to potentially take over the Oracle Commerce Platform. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-70954 is a critical vulnerability in Oracle Commerce Platform version 11.4.0 affecting the Dynamo Application Framework component. It allows an unauthenticated attacker with network access via HTTP to fully compromise the platform, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided data.

CVE-2026-70953 is a critical vulnerability in Oracle Commerce Platform version 11.4.0 affecting the Dynamo Application Framework component. It allows an unauthenticated attacker with network access via TCP to fully compromise the platform, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-61137 is a high-severity vulnerability in Oracle Commerce Platform version 11.4.0, specifically in the Dynamo Application Framework component. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the platform. Successful exploitation can lead to full takeover of the Oracle Commerce Platform, impacting confidentiality, integrity, and availability. The vulnerability is rated with a CVSS 3.1 base score of 8.1. Oracle has published a Critical Patch Update advisory in July 2026 addressing multiple vulnerabilities, but no explicit patch for this CVE is confirmed in the advisory.

CVE-2026-61136 is a high-severity vulnerability in Oracle Commerce Platform version 11.4.0 affecting the Dynamo Application Framework component. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, delete, and read operations on accessible data. Additionally, the vulnerability can cause a partial denial of service (DoS) condition. The CVSS 3.1 base score is 7.3, reflecting impacts to confidentiality, integrity, and availability. No explicit patch or remediation details are provided in the vendor advisory, but Oracle recommends applying Critical Patch Updates promptly. No known exploits are reported in the wild at this time.

CVE-2026-61135 is a high-severity vulnerability in Oracle Commerce Platform version 11.4.0 affecting the Dynamo Application Framework component. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical data, or gain unauthorized access to all data accessible by the platform. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific version in the provided content.

CVE-2026-61134 is a vulnerability in Oracle Commerce Platform 11.4.0 affecting the Dynamo Application Framework component. It allows a low privileged attacker with network access via HTTP to potentially compromise the platform. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by the platform. The vulnerability has a CVSS 3.1 base score of 6.8, indicating medium severity with high confidentiality and integrity impacts but no availability impact.

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

CVE-2026-61132 is a high-severity vulnerability in Oracle Commerce Platform 11.4.0 affecting the Dynamo Application Framework component. It allows a low privileged attacker with network access via HTTP to compromise the platform, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data within the platform. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle strongly recommends applying Critical Patch Updates promptly. The vulnerability may also impact additional Oracle products due to scope change.

CVE-2026-61131 is a critical vulnerability in Oracle Commerce Platform version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the platform, potentially leading to complete takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS score of 9.8. Oracle has acknowledged this issue in its July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided data.