Threats tagged 'ghsa-vx35-c4jh-5q9v'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It is a network-accessible vulnerability that is difficult to exploit but can allow an unauthenticated attacker to compromise the product, potentially leading to full takeover. The vulnerability has a high CVSS 3.1 base score of 8.1, indicating severe confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides security patches for affected products.