Threats tagged 'ghsa-q6hf-57ww-m8v6'

CVE-2026-83248 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to cause a denial of service (hang or crash) and gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with confidentiality and availability impacts. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.