Threats tagged 'ghsa-9rm8-c4xv-2cx5'

CVE-2026-83251 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with network access via TLS to cause a denial of service (hang or repeated crash) and gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity with impacts on confidentiality and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, recommending customers apply patches promptly.