CVE-2015-2653: Oracle Commerce Platform

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System.

Affected products

• Oracle Commerce Platform: version 3.1.1 only; version 3.1.2 only; version 11.0 only; version 11.1 only

Published 2015-07-16. Last modified 2026-06-17.