Threats tagged 'ghsa-544v-fc52-hm3v'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 that allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data and perform unauthorized data modifications. Exploitation requires user interaction from a person other than the attacker. The vulnerability has a high CVSS score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products including Oracle Commerce Experience Manager.