Threats tagged 'ghsa-c9xj-w2p5-r2f8'

A vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized data modifications. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.