Threats tagged 'ghsa-v554-6h4v-c5pw'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity, with a confidentiality impact and scope change affecting additional products. Oracle has released a Critical Security Patch Update including fixes for this and many other vulnerabilities.