Threats tagged 'ghsa-7hx6-p6g5-64w2'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update, which includes targeted patches for this and many other vulnerabilities.