{"id":"CVE-2015-0495","title":"Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unk…","summary":"Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unk…","severity":"high","cvss":7.5,"cvssVector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","vendor":"oracle","product":"commerce_experience_manager","affected":["commerce_experience_manager","commerce_guided_search"],"published":"2015-04-16","updated":"2026-07-24","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2015-0495","references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","label":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.02028,"epssPercentile":0.79905,"ingestedAt":"2026-07-24T14:29:27.293Z","slug":"CVE-2015-0495","body":"## Overview\n\nUnspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.\n\n## Affected\n\n- `commerce_experience_manager`\n- `commerce_guided_search`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}