Oracle Commerce Platform vulnerabilities

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack is easily exploitable and requires no user interaction.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) allows an unauthenticated attacker with network access via TCP to compromise the system. The attack is easily exploitable and requires no user interaction.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. An unauthenticated attacker can take over the e-commerce platform via HTTP.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework). Affects version 11.4.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical data and cause system hang or frequent crashes (DoS).

Vulnerability in Oracle Commerce Platform (component: ATG Portals) version 11.4.0. An unauthenticated attacker can take over the e-commerce platform via HTTP.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. An unauthenticated attacker with access to the physical communication segment can fully compromise the platform.

Vulnerability in Oracle Commerce Platform (Dynamo Application Framework component) version 11.4.0. An unauthenticated attacker via HTTP can compromise the system, though exploitation is difficult.

Vulnerability in Oracle Commerce Platform (version 11.4.0) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modify critical data.

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and access all platform data.

In Oracle Commerce Platform version 11.4.0, a vulnerability in the Dynamo Application Framework allows an unauthenticated attacker to remotely access critical data via LDAP. CVSS 7.5 (confidentiality).

Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. A low-privileged attacker with network access via HTTP can compromise the system, requiring user interaction. The attack may affect additional products. Unauthorized access to critical data and modification is possible.

An unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.