CVE-2015-2607 Information disclosure in n/a

What is CVE-2015-2607?

CVE-2015-2607 is a medium-severity vulnerability in n/a, published on 16 Jul 2015. It can be exploited over the network.

Official description

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System.

Which versions are affected by CVE-2015-2607?

It affects 1 product.

Products include Oracle Commerce Platform.

How do I fix CVE-2015-2607?

No fix has been published for CVE-2015-2607 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-2607 being exploited?

There is no known exploitation of CVE-2015-2607 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2026-70953 Auth bypass in Oracle Commerce Platform Critical 9.8
• CVE-2026-70954 Auth bypass in Oracle Commerce Platform Critical 9.8
• CVE-2026-61129 Auth bypass in Oracle Commerce Platform Critical 9.8
• CVE-2026-61131 Auth bypass in Oracle Commerce Platform Critical 9.8
• CVE-2021-2463 Auth bypass in Commerce Platform Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-58gq-pfvp-f697.