CVE-2026-61133

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform version 11.4.0

Description An issue exists in the Dynamo Application Framework component of the Oracle Commerce Platform. An unauthenticated attacker with network access via LDAP (Lightweight Directory Access Protocol, a protocol used for accessing and maintaining distributed directory information services) can compromise the platform. This may lead to unauthorized access to critical data or complete access to all accessible data within the Oracle Commerce Platform.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.