Threats affecting pkg:maven/com.oracle/commerce-service-center

CVE-2026-34316 is a vulnerability in Oracle Commerce Service Center version 11.4.0 that allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete operations on accessible data, as well as unauthorized read access to some data. The vulnerability impacts confidentiality and integrity but not availability. The CVSS 3.1 base score is 6.1, indicating medium severity. No official patch or remediation has been confirmed yet from the vendor advisory.