Threats tagged 'ghsa-w6cv-w726-mc9j'

A vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0 allows a low privileged attacker with logon access to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data and cause denial of service via hang or repeated crashes. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on integrity and availability.