# Oracle Commerce Experience Manager


- [CVE-2026-61146](https://insights.sbomify.com/CVE-2026-61146/): Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.9)
- [CVE-2026-70995](https://insights.sbomify.com/CVE-2026-70995/): Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.8)
- [CVE-2026-61145](https://insights.sbomify.com/CVE-2026-61145/): Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.8)
- [CVE-2026-61161](https://insights.sbomify.com/CVE-2026-61161/): Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.8)
- [CVE-2026-70998](https://insights.sbomify.com/CVE-2026-70998/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.3)
- [CVE-2026-70976](https://insights.sbomify.com/CVE-2026-70976/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70977](https://insights.sbomify.com/CVE-2026-70977/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70978](https://insights.sbomify.com/CVE-2026-70978/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70979](https://insights.sbomify.com/CVE-2026-70979/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70981](https://insights.sbomify.com/CVE-2026-70981/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70984](https://insights.sbomify.com/CVE-2026-70984/): Missing authorization in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)
- [CVE-2026-70994](https://insights.sbomify.com/CVE-2026-70994/): Auth bypass in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/commerce-experience-manager/