Threats Tagged 'cve-2026-83247'

CVE-2026-83247 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with access to the infrastructure where the product runs to potentially take over the application. Exploitation requires user interaction by someone other than the attacker. The vulnerability has a high CVSS score of 7.8, indicating significant confidentiality, integrity, and availability impacts.

CVE-2026-83247 is a high-severity vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker with logon access to the infrastructure to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to full takeover of the affected Oracle Commerce components. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides security patches for multiple products including this one. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.