A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality and availability.