Description

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.6",
  "pubDate": "2026-08-18T21:18:01.690Z",
  "pubdate": "2026-08-18T21:18:01.690Z",
  "executiveSummary": "An easily exploitable vulnerability exists within the Workbench component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. This security flaw allows a low-privileged remote attacker with network access via HTTP to compromise the affected system.\nSuccessful exploitation requires human interaction from a user other than the attacker. Due to a scope change, successful attacks may significantly impact additional products beyond the primary target.\nThe impact of this vulnerability includes unauthorized access to critical data or complete access to all accessible data within Oracle Commerce Guided Search / Oracle Commerce Experience Manager, alongside unauthorized update, insert, or delete capabilities for a subset of accessible data.\nThe vulnerability carries a CVSS 3.1 Base Score of 7.6 with a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N, highlighting significant risks to data confidentiality and integrity.",
  "technicalDetails": "The vulnerability resides in the Workbench component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0. It manifests as a remotely exploitable security flaw accessible over the network via the HTTP protocol.\nAttack execution requires low privileges, meaning the adversary must possess authenticated access to the application at a minimal authorization tier. Furthermore, successful exploitation mandates user interaction, requiring a third party to perform an action that triggers the attack payload.\nThe attack flow involves an authenticated, low-privileged threat actor delivering a crafted request over HTTP to the vulnerable Workbench component. Because the vulnerability involves a scope change (S:C), the compromise extends beyond the boundaries of Oracle Commerce Guided Search / Oracle Commerce Experience Manager, potentially impacting additional integrated or secondary products within the environment.\nUpon successful execution, the attack leverages the required human interaction to bypass contextual security controls. This results in severe confidentiality impacts, granting unauthorized access to critical data or complete access to all data accessible by Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Additionally, it yields integrity impacts by allowing unauthorized update, insert, or delete access to a subset of accessible data."
}