What are you running?
Name a product and the release you run. You get its CVEs, with whether Waratek has a rule for each one, whether a fix is known and whether exploitation has been reported.
How versions match
A CVE matches when its records name your version or a range that includes it. Oracle Java SE is the exception: Oracle's advisories name only the latest update of each Java release, so 8u281 also matches a CVE Oracle listed for 8u491. If a CVE's versions can't be read, it is shown anyway.
Browse Oracle products by family
The 93 product families that Oracle's patch advisories name for CVEs in this data. Counts are distinct CVEs; a CVE listed under two components of a family is counted once for the family. Select a family's components to filter by component instead.
Oracle Commerce 293 117 components
- Experience Manager 34
- Content Acquisition System 28
- Forge 27
- Endeca Application Controller 24
- Dynamo Application Framework 19
- Content Acquisition System (Netty) 11
- Forge (OpenSSL) 9
- Forge (curl) 7
- Content Acquisition System (Apache Tomcat) 6
- Endeca Integration (Apache CXF) 5
- Tools and Frameworks 5
- Commerce Service Center 4
- Dynamo Application Framework (jackson-databind) 4
- Content Acquisition System (Apache CXF) 3
- Content Acquisition System (Apache Commons Compress) 3
- Content Acquisition System (Perl) 3
- Content Acquisition System (Spring Framework) 3
- Dynamo Application Framework (Spring Framework) 3
- MDEX 3
- WebUI (CKEditor) 3
- Workbench 3
- Workbench, Endeca Application Controller, Content Acquisition System (Spring Framework) 3
- Business Control Center (underscore) 2
- Content Acquisition System (Apache Commons IO) 2
- Content Acquisition System (CKEditor) 2
- Dynamo Application Framework (Apache Log4j) 2
- Dynamo Application Framework (Google Guava) 2
- Endeca Application Controller (Apache Tomcat) 2
- Endeca Application Controller (XStream) 2
- Endeca Integration (Spring Framework) 2
- Experience Manager (jQueryUI) 2
- Experience Manager, Business Control Center (CKEditor) 2
- MDEX, Forge (curl) 2
- Platform (OWASP Java HTML Sanitizer ) 2
- Platform (Spring Framework) 2
- Platform Services 2
- Tools And Frameworks, Content Acquisition System, Platform Services (Spring Framework) 2
- Workbench (Apache Tika) 2
- Workbench (Apache Tomcat) 2
- Workbench (CKEditor) 2
- Workbench (Netty) 2
- ATG Portals 1
- Asset Manager 1
- Asset Manager (dojo) 1
- Business Control Center (jQuery) 1
- Content Acquisition System (Apache Commons Net) 1
- Content Acquisition System (Java SE) 1
- Content Acquisition System (JsonPath) 1
- Content Acquisition System (Oracle Java SE) 1
- Content Acquisition System (XStream) 1
- Content Acquisition System (dom4j) 1
- Content Acquisition System (jackson-databind) 1
- Content Acquisition System (json-smart) 1
- Content Acquisition System, Endeca Application Controller, Experience Manager (Apache Tomcat) 1
- Content Acquisition System, Platform Service, Workbench (Apache Tomcat) 1
- Content Acquisition System, Workbench (Apache Tomcat) 1
- Content Acquisition System, Workbench (Apache Xerces2 Java) 1
- Content Acquisition System, Workbench (Google Guava) 1
- Content Acquisition System, Workbench (Spring Framework) 1
- Content Acquisition System, Workbench (jackson-databind) 1
- Content Acquisition System, Workbench (json-smart) 1
- Content Acquisition System, Workbench, Endeca Application Controller (Apache Tomcat) 1
- Content Acquisition System, Workbench, Endeca Application Controller (Oracle Java SE) 1
- Content Acquisition System, Workbench, Endeca Application Controller (Spring Framework) 1
- Core (CKEditor) 1
- Dynamo Application Framework (Apache Commons FileUpload) 1
- Dynamo Application Framework (Apache Commons Lang) 1
- Dynamo Application Framework (Apache Neethi) 1
- Dynamo Application Framework (Coherence) 1
- Dynamo Application Framework (JDBC) 1
- Dynamo Application Framework (Jakarta Expression Language) 1
- Dynamo Application Framework (dom4j) 1
- Dynamo Application Framework (jackson-mapper-asl) 1
- Dynamo Commerce Server 1
- Dynamo Personalization Server 1
- Endeca Application Controller (Apache Santuario XML Security For Java) 1
- Endeca Application Controller (Apache Xerces2 Java) 1
- Endeca Application Controller (Perl) 1
- Endeca Application Controller (Spring Framework) 1
- Endeca Integration (Apache HttpClient) 1
- Endeca Integration (Apache Xerces-J) 1
- Endeca Integration (Woodstox) 1
- Experience Manage (jackson-databind) 1
- Experience Manager (Apache Commons BeanUtils) 1
- Experience Manager (Apache Commons FileUpload) 1
- Experience Manager (Apache Tomcat) 1
- Experience Manager (Netty) 1
- Experience Manager, Platform Services (Apache Commons BeanUtils) 1
- Framework, Experience Manager (Apache ZooKeeper) 1
- Framework, Experience Manager (Bouncy Castle Java Library) 1
- Framework, Experience Manager (OpenSSL) 1
- Framework, Experience Manager (Swagger UI) 1
- Framework, Experience Manager (cURL) 1
- Internal operations 1
- MDEX (dom4j) 1
- Merchandising (CKEditor) 1
- Oracle Commerce Guided Search 1
- Oracle Commerce Platform 1
- Platform 1
- Platform (Apache Commons FileUpload) 1
- Platform (CKEditor) 1
- Platform (JSON-java) 1
- Platform (jackson-databind) 1
- Tools And Frameworks (Netty) 1
- Tools And Frameworks, Content Acquisition System, Platform Services (Apache Commons Lang) 1
- Tools And Frameworks, Content Acquisition System, Platform Services (Apache Tomcat) 1
- Tools and Frameworks (Java SE) 1
- Workbench (Apache Commons FileUpload) 1
- Workbench (Apache Derby) 1
- Workbench (Bouncy Castle Java Library) 1
- Workbench (Guava) 1
- Workbench (HTTPClient) 1
- Workbench (JSON-java) 1
- Workbench, Content Acquisition System, Platform Services (Apache Xalan-Java) 1
- Workbench, Endeca Application Controller, Content Acquisition System (Apache Tomcat) 1
- Workbench, Experience Manager (jQuery) 1
- Workbench, Platform Services, Content Acquisition System (Apache Tomcat) 1