A vulnerability exists in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It is a network-accessible flaw that is difficult to exploit but can allow an unauthenticated attacker to take over the affected product. The vulnerability has a high severity with a CVSS 3.1 base score of 8.1, impacting confidentiality, integrity, and availability.