GCVE-110-NCSC-2024-413

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published October 17, 2024

Oracle heeft kwetsbaarheden verholpen in Commerce.

Weaknesses (CWE)

CWE-611Improper Restriction of XML External Entity ReferenceCWE-20Improper Input ValidationCWE-94Improper Control of Generation of Code ('Code Injection')CWE-552Files or Directories Accessible to External PartiesCWE-404Improper Resource Shutdown or ReleaseCWE-770Allocation of Resources Without Limits or ThrottlingCWE-755Improper Handling of Exceptional Conditions

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
oracle	commerce	—	—
oracle	commerce_platform	—	—
oracle	oracle_commerce_platform	—	—
oracle	commerce_guided_search	—	—
oracle	oracle_commerce_guided_search	—	—

Aliases

CVE-2019-10172 CVE-2020-13956 CVE-2021-23358 CVE-2021-28170 CVE-2022-46337 CVE-2023-20863 CVE-2023-2976 CVE-2024-26308 CVE-2024-34750

References

advisory

Browse GCVE Records

72,096 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON