Threats tagged 'ghsa-j3v7-2vgf-wqp7'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Endeca Application Controller component) version 11.4.0. It allows a low privileged attacker with logon access to the infrastructure to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities.