Threats tagged 'ghsa-63gh-vhgm-32m4'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with physical access to the communication segment of the hardware running the product to potentially gain unauthorized access to critical data, perform unauthorized data modifications, or cause denial of service through hangs or crashes. The vulnerability is rated with a CVSS 3.1 base score of 7.1, indicating high severity.