Threats tagged 'ghsa-f8q7-p4m3-8f74'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data or cause a partial denial of service. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating medium severity with confidentiality and availability impacts.