Threats tagged 'ghsa-j42h-rvvc-gj32'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data, perform unauthorized data modifications, and cause partial denial of service. The vulnerability is rated with a CVSS 3.1 base score of 7.0, indicating high severity.