Description

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.1",
  "pubDate": "2026-08-18T21:17:59.473Z",
  "pubdate": "2026-08-18T21:17:59.473Z",
  "executiveSummary": "An easily exploitable vulnerability affects the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product, specifically within the Experience Manager component version 11.4.0. This security flaw allows a low-privileged remote attacker with network access via the HTTP protocol to compromise the affected application.\nSuccessful exploitation of this vulnerability grants the attacker unauthorized access to critical data or complete access to all data accessible by Oracle Commerce Guided Search / Oracle Commerce Experience Manager, leading to a severe breach of confidentiality. Additionally, the attacker can induce a partial denial of service (partial DoS), impacting the availability of the system.\nThe vulnerability carries a CVSS 3.1 Base Score of 7.1 with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L, highlighting its reliance on low privileges and network accessibility without requiring user interaction. Organizations utilizing the affected version face significant risk regarding data exfiltration and service degradation, necessitating immediate remediation and monitoring of HTTP traffic targeting the vulnerable component.",
  "technicalDetails": "The vulnerability resides within the Experience Manager component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. The root cause stems from insufficient access controls and validation mechanisms within the application logic handling HTTP requests processed by the vulnerable component.\nExploitation of this flaw requires the attacker to have network access to the target system via HTTP and valid low-privileged credentials. Due to the low attack complexity and the absence of required user interaction, an authenticated attacker can craft malicious HTTP requests directed at the vulnerable endpoints of the Experience Manager component.\nThe attack flow proceeds as follows: First, the low-privileged attacker establishes an HTTP connection to the exposed Oracle Commerce Guided Search / Oracle Commerce Experience Manager interface. Second, the attacker submits specially crafted HTTP requests designed to bypass authorization checks enforced by the application layer. Third, the vulnerable Experience Manager component improperly parses and processes these requests, granting the attacker unauthorized read access to sensitive data repositories or internal structures managed by the software.\nConcurrently, the execution of specific malicious request payloads can exhaust computational resources or disrupt normal processing threads within the component, resulting in a partial denial of service condition. The post-exploitation impact includes the compromise of confidentiality through the unauthorized retrieval of critical or complete application data, as well as degraded system availability impacting legitimate users."
}