Threats tagged 'ghsa-xr8h-rw7f-34j2'

A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It is a difficult to exploit flaw that requires a low privileged attacker with logon access to the infrastructure. Successful exploitation can lead to full takeover of the affected product and may impact additional Oracle Commerce products. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, providing patches to remediate the issue.