Oracle Commerce Service Center vulnerabilities

4 CVEs affecting Oracle Commerce Service Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34316, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-14535, published 2020-07-15. High severity, CVSS 7.4. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Difficult…
CVE-2016-5491, published 2016-10-25. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0.3.5 and 10.2.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2021-2462, published 2021-07-21. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2.…
CVE-2026-34316, published 2026-07-21. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. Easily exploitable…